News for hackers. Stuff that matters.

A comment on CVE-2019-9193: Not a Security Vulnerability.

Re:CVE-2019-9193: Not a Security Vulnerability by mixologist on Sunday April 14, 2019 @11:39AM (#19660004)
If this is CVE, what is Docker then? :)

Anyone with privileges to run docker image is basically root on your host.

[ Parent | on HN ]
Re:CVE-2019-9193: Not a Security Vulnerability by imtringued on Sunday April 14, 2019 @11:50AM (#19660086)
This is why you should never add your user to the docker group. Just use `sudo docker` or put your docker commands in a script that can only be edited by root and execute the script via sudo with NOPASSWD.
[ Parent | on HN ]
Re:CVE-2019-9193: Not a Security Vulnerability by ahachete on Sunday April 14, 2019 @02:08PM (#19660768)
Much better: replace Docker with https://podman.io/, which runs with user privileges, no root.
[ Parent | on HN ]