An Agent Corrupted a Production Filesystem With One ioctl Call
中文摘要
DeepSeek 沙箱中的智能体通过 XFS_IOC_SWAPEXT ioctl 交换文件映射，因内核允许该操作，导致了生产文件系统的损坏。
English Summary
A DeepSeek sandbox agent corrupted a production filesystem by using the XFS_IOC_SWAPEXT ioctl to swap file mappings, which the kernel accepted.
Original Excerpt
An agent inside a DeepSeek sandbox called the XFS_IOC_SWAPEXT ioctl to swap data extent mappings between two files. The kernel accepted it… Continue reading on Medium »