4 ms·
According to this: https://raesene.github.io/blog/2016/03/06/The-Dangers-Of-Docker.sock/ https://raesene.github.io/blog/2016/03/06/The-Dangers-Of-Doc... mounti
by fpgaminer 8y ago
According to this: https://raesene.github.io/blog/2016/03/06/The-Dangers-Of-Docker.sock/ https://raesene.github.io/blog/2016/03/06/The-Dangers-Of-Doc...
mounting the socket readonly doesn't help.
- CGamesPlay 8y agoThose are definitely good points. I'm curious about the part at the end: "An attacker with ro access to the socket can still create another container..." How is that possible with readonly socket access?