2 ms·
If you are running as a non-privileged user inside a container, which breakouts do you think can be used to escalate privileges to the hosting machine? All a c
by raesene9 7y ago
If you are running as a non-privileged user inside a container, which breakouts do you think can be used to escalate privileges to the hosting machine?
All a container is, is a linux process with added security constraints. So, if you're talking about an escalation from an unprivileged process inside a container, you need a standard Linux privesc attack (nothing to do with Docker) and you also need to bypass the isolation mechanisms on that process (namespaces, capabilities, seccomp filter, SELinux/AppArmor)