Ouch, escaping the sandbox via the /dev/mem descriptor sounds bad. We need cap_mmap_ranges_limit or something! :D
/dev/mem
cap_mmap_ranges_limit
Ouch, escaping the sandbox via the
/dev/mem
descriptor sounds bad. We needcap_mmap_ranges_limit
or something! :D