Graham Perrin @grahamperrin@mastodon.bsd.cafe
Public

Escaping Containment: A Security Analysis of FreeBSD Jails

16:15 GMT, UCT, UTC Saturday 2025-12-27

events.ccc.de/congress/2025/hu @CCC

[39c3] Escaping Containment: A Security Analysis of FreeBSD Jails

FreeBSD’s jail feature is one of the oldest and most mature OS-level isolation mechanisms in use today, powering hosting environments, container frameworks, and security sandboxes. But as with any large and evolving kernel feature, complexity bree...

events.ccc.de · 39c3

0
0
2

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.bsd.cafe/users/grahamperrin/statuses/115790975758203115 on your instance and quote it. (Note that quoting is not supported in Mastodon.)

Graham Perrin @grahamperrin@mastodon.bsd.cafe
Public

RE: mastodon.bsd.cafe/@grahamperri

＂… the reality is that building an operating system is INCREDIBLY hard, … just the stuff that we did with the debugger and all these hoops you have to jump through, …

I mean, that's just a fraction of a thing, like, an OS is ENORMOUS, and it's decades of work layered on top, and somehow, someone has to keep it all in their head and get it working. … it's very, very difficult to understand that it's NOT easy – and if anybody thinks this stuff is easy, by the way, go build your own operating system and see how hard it is. It is unbelievably painful. …＂

― reddit.com/r/freebsd/comments/

0
0
0
0
0
1