Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Subuser turns Docker containers into normal Linux programs, limiting privileges. Parent comment
This did not automatically lead to allow a contained user to breakout, but made it easier.
In 1.10 user namespacing reduces this risk as the root user in a container can be remapped to another user account outside the container.
There are no comments on this comment yet.
This did not automatically lead to allow a contained user to breakout, but made it easier.
In 1.10 user namespacing reduces this risk as the root user in a container can be remapped to another user account outside the container.