Re:Docker Bug Allows Root Access to Host Filesystem
by Leynos on Wednesday May 29, 2019 @09:54AM
(#20040166)
The suggestion in the linked post is a situation where the Docker daemon is being controlled via its API in a multi-tennant environment where user configuration files are loaded into the container via the cp endpoint. I could concieve of this being a risk if you allow users to create symlinks in the location where the configuration files are situated.
[ Parent
| on HN ]
Re:Docker Bug Allows Root Access to Host Filesystem
by hclaria on Wednesday May 29, 2019 @10:35AM
(#20040675)
Except giving access to a docker daemon equals giving the root access to the machine
because it's easy to do something such as :
$ docker run -it -v /:/hostfs debian chroot /hostfs
# I'm root !
Re:Docker Bug Allows Root Access to Host Filesystem
by the8472 on Wednesday May 29, 2019 @10:38AM
(#20040720)
The issue is an unprivileged container fooling the host, not the host intentionally escalating to root.
Re:Docker Bug Allows Root Access to Host Filesystem
by Leynos on Thursday May 30, 2019 @03:23AM
(#20049086)
Indeed. The point discussed in the grandparent relates to indirect access to the daemon. E.g., a process (not under direct user control) communicating with the Docker daemon via http API. The point being that the cp endpoint can be compromized without the user having direct control over the API parameters.