[vrn21]

every syscall on containers run on the kernal with full privelages, so if needed one can break out of the container and get access to the host

[ripped_britches]

> with full privs

No that’s just a misconfigured container then.

Unless there is an exploit on an unpatched kernel bug, a properly configured container shouldn’t allow break out