Containers don't contain. You have to assume that any code running inside a container has broken outside of its mount namespace & can interact with anything ru

Containers don't contain. You have to assume that any code running inside a container has broken outside of its mount namespace & can interact with anything running on the host. Only Linux's traditional mechanisms (credentials; capabilities; SELinux policy; others are available) are able to defend against this.