3 ms·
It used to be trivial to break out of docker containers, if you had root within them. I suspect that is still the case.
by stevekemp 12y ago
It used to be trivial to break out of docker containers, if you had root within them. I suspect that is still the case.
- tlunter 12y agoIs this serious or just some spreading some FUD? Can you show me an example? Honest question
- general_failure 12y agoFUD
- stevekemp 12y agoExample here: http://blog.bofh.it/debian/id_413 http://blog.bofh.it/debian/id_413 * Got root in the countainer. * You "know" where that is mapped to on the host, because it is based on the UID of the container which is set as the hostname. * You configure a trigger to run a script, using that knowledge. * Code happens on the host, outside the container.
- general_failure 12y agoThe above example is about LXC and sysfs. We are talking docker which uses aufs.
- stevekemp 12y agoIndeed, this is an LXC attack, rather than docker-specific. But, that said, the attack works as specified against docker 0.11.0. Largely because guests do have sysfs mounted at /sys.
- stevekemp 12y agoPlease see this example - http://blog.bofh.it/debian/id_413 http://blog.bofh.it/debian/id_413