3 ms·
Containers are great for isolating trusted applications from one another to ease deployment, but using them for multi-tenant security is ill advised. Since all
by kogir 13y ago
Containers are great for isolating trusted applications from one another to ease deployment, but using them for multi-tenant security is ill advised.
Since all containers share the same kernel, any local privilege escalation vulnerability in Linux can be used to escape the container. Such vulnerabilities are much more common than vulnerabilities in mature hypervisors, so virtualization is the safer choice.
- sarnowski 13y agoAgree. I keep telling that container may provide some benefits but its really not security (especially docker which uses LXC which is still not complete und as you said uses a shared kernel - one plus point is Ubuntu's combination with AppArmor which mitigates certain attacks but configuring AppArmor is itself often overseen. Other distros are worse). If you want to secure one app from another, just use separate hardware.
- tptacek 13y agoThis, and also bear in mind that kernel crypto state, particularly for the RNG, is shared.
- sneak 13y agoOh, fuck. I hadn't even thought of that. That's disaster.
- SvenDowideit 13y agoonly if you're expecting containers to somehow be a unicorn that lets you give people you don't know have your root password. :)
- viraptor 13y agoCould you explain what the implications are? I can see it going really bad if the simple dev/urandom is shared, but what are the practical risks for dev/random? (apart from the simple dos on host/all containers by draining)