> Why were the constraints of the game so loose? It even gave unprivileged SSH access to the real machine, outside docker! Usually you are not expected to come

> Why were the constraints of the game so loose? It even gave unprivileged SSH access to the real machine, outside docker! Usually you are not expected to come up with 0days in CTFs (although 32C3 CTF actually featured a "0.5"day-ish bug in a different challenge that was not considered a security issue before). The challenge here was to realize that you could pass a directory file descriptor to the container via a Unix socket, not to break out of a well-configured docker container. The latter would hopefully be a bit harder to do in just a few hours of time :)