> I think a non-privileged user (or the use of user namespaces) would limit the scope of the attack based on permissions I don't think so -- Docker does all ar

> I think a non-privileged user (or the use of user namespaces) would limit the scope of the attack based on permissions I don't think so -- Docker does all archive operations from the context of Docker (so, as root). Obviously with rootless Docker this is different, but I highly doubt anyone has started using it yet. EDIT: Obviously also if Docker has an AppArmor profile applied or restrictive SELinux labels then it will also be limited by that.