3 ms·
It's a root daemon which can be made to run arbitrary commands by anyone using its interface, so yes it is a huge, huge security burden. You can't just brush th
by soraminazuki 6y ago
It's a root daemon which can be made to run arbitrary commands by anyone using its interface, so yes it is a huge, huge security burden. You can't just brush that off as a superficial problem.
- educar 6y agoGiven that the most common case is running docker in server environments in VMs and the sysadmins are root, is this a real issue? Can you tell me an environment where a multi-tenant system runs docker?
- soraminazuki 6y agoYes, it[1] is[2] a[3] real[4] issue[5] which leads to privilege escalation bugs. It also doesn't help that most containers that Docker is responsible for managing is supposed to be unprivileged, and Docker itself is commonly used as a component for a multi-tenant container runtime. [1] https://www.cvedetails.com/cve/CVE-2019-15752/ https://www.cvedetails.com/cve/CVE-2019-15752/ [2] https://www.cvedetails.com/cve/CVE-2019-14271/ https://www.cvedetails.com/cve/CVE-2019-14271/ [3] https://www.cvedetails.com/cve/CVE-2019-5736/ https://www.cvedetails.com/cve/CVE-2019-5736/ [4] https://www.cvedetails.com/cve/CVE-2018-15664/ https://www.cvedetails.com/cve/CVE-2018-15664/ [5] https://www.cvedetails.com/cve/CVE-2018-15514/ https://www.cvedetails.com/cve/CVE-2018-15514/