3 ms·
Even if the containers were running on the same physical machine as the webapp you'd have to break out of the container your code is in first... If you know of
by anonymousJim12 8y ago
Even if the containers were running on the same physical machine as the webapp you'd have to break out of the container your code is in first... If you know of a container breakout exploit then you should definitely publish it!
- baby 8y agoa container is not about security, I don't think docker made any claim that you can't easily escape from a container.
- anonymousJim12 8y agoRight, a container is about isolation. I didn't mention anything about docker, seeing that containers are a linux kernel feature, but if you know of container escape vulnerabilities in the kernel you should publish them.