4 ms·
My guess, something like Docker. It only matters if you can break out of the Linux container.
by Intermernet 12y ago
My guess, something like Docker. It only matters if you can break out of the Linux container.
- stevekemp 12y agoIt used to be trivial to break out of docker containers, if you had root within them. I suspect that is still the case.
- tlunter 12y agoIs this serious or just some spreading some FUD? Can you show me an example? Honest question
- general_failure 12y agoFUD
- stevekemp 12y agoExample here: http://blog.bofh.it/debian/id_413 http://blog.bofh.it/debian/id_413 * Got root in the countainer. * You "know" where that is mapped to on the host, because it is based on the UID of the container which is set as the hostname. * You configure a trigger to run a script, using that knowledge. * Code happens on the host, outside the container.
- general_failure 12y agoThe above example is about LXC and sysfs. We are talking docker which uses aufs.
- stevekemp 12y agoIndeed, this is an LXC attack, rather than docker-specific. But, that said, the attack works as specified against docker 0.11.0. Largely because guests do have sysfs mounted at /sys.
- stevekemp 12y agoPlease see this example - http://blog.bofh.it/debian/id_413 http://blog.bofh.it/debian/id_413
- deleted 12y ago[deleted]
- jarrett 12y agoEven if the code is sandboxed, it's possible to run outgoing attacks from something like this. The same is of course true of traditional server rentals, EC2, and any other service that gives you an OS instance of your own. The difference, though, is those are (ostensibly) less anonymous.