4 ms·
It’s an information leak. Who knows what attackers can learn about the host via this channel. Why leak it unless you have to?
by chowyuncat 6y ago
It’s an information leak. Who knows what attackers can learn about the host via this channel. Why leak it unless you have to?
- jeffbee 6y agoOK, that's not a complexity trade I'd be willing to make, but I can see it. However, that's unrelated to the nonsensical reason given by the article.
- cats4256 6y agoIn traditional Docker installs, you (can) run as real UID 0 (and many containers do) with CAP_KILL [https://docs.docker.com/engine/reference/run/ https://docs.docker.com/engine/reference/run/].