{
  "id": 18324082,
  "title": "[$] User namespaces + file capabilities = trouble",
  "url": "https://urgent.news/2026/11/05/user-namespaces-file-capabilities-trouble",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-05T14:33:59.000Z",
  "source": {
    "name": "LWN",
    "slug": "lwn",
    "url": "https://lwn.net/Articles/1103429/"
  },
  "original_language": "en",
  "account": null,
  "summary": "User namespaces are a key part of the kernel's toolkit for assembling containers; processes within a user namespace can appear to have full root access to the system while gaining no extra privileges in the wider system. At least, that is the intent. In practice, keeping privilege contained within a user namespace has often turned out to be difficult. As an example, consider this small patch…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}