3 ms·

There are valid concerns. Someone with access to the docker control socket effectively has root on your machine: e.g. `docker run -v /etc:/external_etc ubuntu

• icebraining 12y ago
  Which is exactly what the Docker docs say: "First of all, only trusted users should be allowed to control your Docker daemon." http://docs.docker.io/articles/security/#docker-daemon-attack-surface http://docs.docker.io/articles/security/#docker-daemon-attac...
• msane 12y ago
  This is a good point but applies to other tech that seeks some of the same ends. And if an attack is penetrated that deep then you would be screwed anyway. What's nice from a security perspective is Docker actually lowers the attack surface and shrinks the access that any potential outside attack can have.