• 0 Posts
  • 10 Comments
Joined 7 months ago
cake
Cake day: February 7th, 2025

help-circle

  • To setup kubernetes inside lxc you have to enable quite some capabilities inside host kernel and lxd containers that can be used to escalate privileges from beeing root in container to root in proxmox. Not completely sure but since even containerd containers share the same kernel, attacker might escalate directly from pod to proxmox host. But this last par I am not sure about.








  • I have the biggest problem with two government parties calling for boycott of this referendum. Which I find undemocratic.

    We are voting if we accept a more regulation on special pensions for best artists. Previous law allows minister to give pensions to anyone they want. Also previous law from Yugoslavia allowed inheritance of those pensions. New law forbids that. Old law was also criticized by many independent institutions to be too broad.

    Opposition wants to present this referendum as “should we give those pension at all”. Their position is we should not. And some parties want to give different kinds of awards for best artists.

    But this is not the question we will be asked at all. The choice is between new regulative law and old law.

    However this referendum really is stupid. But one should still vote and vote for accepting new law which is still better than the old one (even if just marginally and you want to remove those rewards in the long run).