Singularity Rootkit: SELinux bypass and netlink filter (ss/conntrack hidden)Comments on Hacker News | Source