3 ms·
Size of cruft aside, there's value in discussing whether such cruft should exist. It's normal for common tools to be SUID root - it's necessary for operation o
by technion 11y ago
Size of cruft aside, there's value in discussing whether such cruft should exist.
It's normal for common tools to be SUID root - it's necessary for operation on a normal machine. Do you really need 30+ SUID binaries inside your Docker container built for one thing?
Docker seems to present an ideal situation for stripping such potential exploit vectors back.