News for hackers. Stuff that matters.
Re:Escaping Docker container using waitid() – CVE-2017-5123 by fpoling on Friday December 29, 2017 @04:03PM (#16031969)
I tried it a couple of months ago. It immediately broke build of one of the images. It was a known bug. So I guess I just wait one more year to try.

In the mean time, I make sure that all my containers runs as non-root with max security restrictions. The exception so far was sshd from OpenSSH and mostly due to incorrect porting from OpenBSD in portable ssh.

There are no comments on this comment yet.