points by mike_hearn 3 days ago | 0 comments
Why would unikernels fix this? They don't even attempt privilege separation at all.
[–] muvlon 3 days ago
Exactly. Anybody deploying Linux today in scenarios where you might replace it with a unikernel is already not affected by LPE. They have a kernel running in a VM with one user and one application, in essence using Linux as a sort of bloated unikernel.
[–] __d 2 days ago