Podman rootless containers and the Copy Fail exploit
kept by eddie
Podman's rootless containers limit the blast radius of the Copy Fail exploit by using user namespaces to map container root to an unprivileged host user, preventing container escape.