logoalt Hacker News

mike_hearn • today at 10:58 AM • 1 reply • view on HN

Why would unikernels fix this? They don't even attempt privilege separation at all.


Replies

muvlon • today at 1:18 PM

Exactly. Anybody deploying Linux today in scenarios where you might replace it with a unikernel is already not affected by LPE. They have a kernel running in a VM with one user and one application, in essence using Linux as a sort of bloated unikernel.