3 ms·
Developers working with docker are almost always in the 'docker' group on their local machine, which is functionally equivalent to running everything as root.
by michaelt 5y ago
Developers working with docker are almost always in the 'docker' group on their local machine, which is functionally equivalent to running everything as root.
- staticassertion 5y agoThis doesn't matter if the attacker is in the container. It just means that if the attacker is outside of the container they have a trivial privesc to root on the host.