Core: projects strictly separated

Core applies namespacing by default (for UNIX users and FPM pools) using Linux namespaces. SUID programs such as sudo cannot be used within these isolated environments. This limits the opportunities to exploit Local Privilege Escalation (LPE) vulnerabilities. The extra isolation protected projects on Core against the Copy Fail, Dirty Frag and Fragnesia vulnerabilities, among others.

Core: namespacing
  • Linux namespaces, by default

    For UNIX users and FPM pools, on every project.

  • SUID binaries unusable

    SUID programs such as sudo cannot be used inside the isolated environment, reducing opportunities for privilege escalation.

  • Protected against many vulnerabilities

    The additional isolation protected Core against Copy Fail, Dirty Frag and Fragnesia, among others.

Try Core for three weeks, no obligation.

William David Edwards
FounderPlan an introduction