OCI Runtime Specification

OCI Runtime Specification.

Type

Standard

Intellectual base

Reference work

Link

https://github.com/opencontainers/runtime-spec

Cited by

1 citation across 1 artifact.

Mechanisms

• Container Runtime
  • Its central honesty problem is that a shared-kernel runtime is an operational boundary, not a hardened security one: it shares the host kernel, so a kernel-level exploit can escape the container in a way it could not escape a full virtual machine.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Registry ID ref:dda036f9cb23 · see in the full table