4 ms·
I use it to grade homeworks, no more open TCP sockets, message queues, open files, some naughties trying to delete my home.
by CSDude 12y ago
I use it to grade homeworks, no more open TCP sockets, message queues, open files, some naughties trying to delete my home.
- mappu 12y agoDocker is not safe for untrusted code. If the client can get local root privileges (e.g. CVE-2014-4699, CVE-2014-4014, CVE-2014-0196, unix-privesc-check, many more) they can then escape the docker container. But it's definitely better than running as your own user!
- CSDude 12y agoYes, I am aware, they are run in non root users.