Re:How to pass docker.sock to your containers while keeping ...
by fpoling on Tuesday April 26, 2016 @04:09AM
(#11570185)
From security point of view there is little practical differences. The container can still communicate with docker normally and trivially become a root on the host. What it prevents is altering ownership and permissions of the socket.
[ Parent
| on HN ]
Re:How to pass docker.sock to your containers while keeping ...
by jjn2009 on Thursday April 28, 2016 @11:11PM
(#11593552)
Ah okay so thats why I see people using read only mount on a docker socket. that makes sense. Some how I never thought of that implication I was just thinking about how in the world a file descriptor permission would effect the http traffic as it travels over the socket, but obviously it doesn't.