Search Results: oci-containers

offensive-container-escape

Docker and OCI container isolation auditing covering `--privileged` risks, dangerous Linux capabilities (`CAP_SYS_ADMIN`, `CAP_DAC_READ_SEARCH`), hostPath/docker.sock mounts, seccomp/AppArmor profiles, and rootless user namespaces.