corpus.blog
41,554 blogs · 5,063,431 posts Claim your blog
Record · corpus.blog/posts/01a08745-ac62-7240-95ce-b5fe1c0fbd76

Stop worrying about ‘allowPrivilegeEscalation’

blog.christophetd.fr · published 14 June 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.christophetd.fr Wayback capture
1blogs citing
First cited
23 Apr 2025
Most recent
23 Apr 2025
Rank this month
not ranked
External links
21
Words captured
1,763

Cited by

Blog
In the post
Date
raesene9
Cap or no cap Read at the source ↗
23 Apr 2025

Links from this post

Link
Host
https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
kubernetes.io
https://github.com/kubernetes/design-proposals-archive/blob/main/auth/no-new-privs.md
github.com
https://dirtycow.ninja/
dirtycow.ninja
https://dirtypipe.cm4all.com/
dirtypipe.cm4all.com
https://securitylabs.datadoghq.com/articles/overlayfs-cve-2023-0386/
securitylabs.datadoghq.com
https://en.wikipedia.org/wiki/Setuid
en.wikipedia.org
https://gist.github.com/christophetd/a601618def2e3441fe680425cb7e1f4f
gist.github.com
https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/
kubernetes.io
https://docs.kernel.org/userspace-api/no_new_privs.html
docs.kernel.org
https://securitylabs.datadoghq.com/articles/container-security-fundamentals-part-1/
securitylabs.datadoghq.com
https://github.com/opencontainers/runc/blob/v1.1.13/libcontainer/standard_init_linux.go
github.com
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1117770/
ncbi.nlm.nih.gov
https://kccnceu2024.sched.com/event/1YeRs/keep-hackers-out-of-your-cluster-with-these-5-simple-tricks-christophe-tafani-dereeper-frederic-baguelin-datadog
kccnceu2024.sched.com
https://tldrsec.com/p/kubernetes-security-threat-informed-defense
tldrsec.com
https://github.com/kubernetes/kubernetes/blob/v1.30.2/pkg/securitycontext/util.go
github.com
https://github.com/kubernetes/website/issues/30104
github.com
https://github.com/kubernetes/kubernetes/blob/v1.30.2/pkg/apis/core/validation/validation.go
github.com
https://news.ycombinator.com/item?id=40679468
news.ycombinator.com
https://x.com/christophetd/
x.com
https://infosec.exchange/@christophetd
infosec.exchange
https://raesene.github.io/
raesene.github.io
Elsewhere on blog.christophetd.fr (8)