3 ms·
Because Docker isn't running as root to begin with; it just convinces the containerized process that it is.
by bandrami 10y ago
Because Docker isn't running as root to begin with; it just convinces the containerized process that it is.
- djmdjm 10y agoYou've just demonstrated that you don't understand either the goals or mechanism of privilege separation: 1) it doesn't require root and 2) it protects more than the root account.
- mrsteveman1 10y agoAren't those the "unprivileged containers" that keep showing up as having huge security vulnerabilities?