3 ms·
This requires you to give your normal user the ability to execute stuff via docker. This means that given the ability to execute code as the user, an attacker c
by eptcyka 6y ago
This requires you to give your normal user the ability to execute stuff via docker. This means that given the ability to execute code as the user, an attacker can trivially gain root access.
- watermelon0 6y agoThere are many ways of running containers as a normal user: https://docs.docker.com/engine/security/rootless/ https://docs.docker.com/engine/security/rootless/ https://github.com/containers/podman#rootless https://github.com/containers/podman#rootless
- antoinealb 6y agoI think in this context that's not a real concern, as on most laptop the human user has root equivalent permissions anyway (via sudo). In addition, Docker supports user namespaces, allowing you to have root in container being mapped to a non root user.