Tags: namespace
Rating: 1.0
Tl: dr: escaping a namespace + setfsuid filesystem sandbox by creating an inner namespace with a weird UID mapping.
Please see the linked gist for details.
I don't remember