News for hackers. Stuff that matters.

A comment on Setting Up a Software Development Environment on Alpine Linux. Parent comment

Re:Setting Up a Software Development Environment on Alpine L... by lojack on Wednesday March 20, 2019 @12:25AM (#19438982)
The docker daemon runs as a privileged user, so if you're able to break out of the container (which has been shown possible recently) then you can compromise the entire host OS.
[ Parent | on HN ]
Re:Setting Up a Software Development Environment on Alpine L... by hjk05 on Wednesday March 20, 2019 @04:13AM (#19439980)
Could you provide a reference for how to break our?
[ Parent | on HN ]
Re:Setting Up a Software Development Environment on Alpine L... by lojack on Wednesday March 20, 2019 @09:25AM (#19441844)
https://www.twistlock.com/labs-blog/breaking-docker-via-runc...

This is from a CVE that was released a little over a month ago.

[ Parent | on HN ]
Re:Setting Up a Software Development Environment on Alpine L... by raesene9 on Wednesday March 20, 2019 @06:58PM (#19447839)
That was a runc vuln, which affected other conatinerization solutions on Linux, not just docker.

Also it didn't really have anything to do with the Docker daemon running as root, it was triggered by the use of root users in containers (blocked if the user didn't do that, had decent SELinux setups or used user namespaces)

[ Parent | on HN ]