The same thing a root user inside of a chroot can do... break out of the namespace and make it into the host system, as root. http://www.projectatomic.io/blog/

The same thing a root user inside of a chroot can do... break out of the namespace and make it into the host system, as root. http://www.projectatomic.io/blog/2014/09/yet-another-reason-containers-don-t-contain-kernel-keyrings/ http://www.projectatomic.io/blog/2014/09/yet-another-reason-... http://opensource.com/business/14/7/docker-security-selinux http://opensource.com/business/14/7/docker-security-selinux