Re: [kernel-hardening] Re: [PATCH resend 2/2] userns: control capabilities of some user namespaces

[Daniel Micay]

Substantial added attack surface will never go away as a problem. There
aren't a finite number of vulnerabilities to be found.