3 ms·
But non-root users within the container can also access mounted volumes, no? Is there some kind of exploit that only works if running as root?
by foldr 6y ago
But non-root users within the container can also access mounted volumes, no? Is there some kind of exploit that only works if running as root?
- lights0123 6y agoYou can setuid root in a volume mounted in host. If that's executed at all by any user, bam you have root on the host. If it's never executed, I don't know what vulnerabilities they were talking about.
- foldr 6y agoRight, but it seems that wouldn't require the app within the Docker container to be running as root to work?