News for hackers. Stuff that matters.

A comment on Docker Bug Allows Root Access to Host Filesystem. Parent comment

Re:Docker Bug Allows Root Access to Host Filesystem by hclaria on Wednesday May 29, 2019 @10:35AM (#20040675)
Except giving access to a docker daemon equals giving the root access to the machine

because it's easy to do something such as :

$ docker run -it -v /:/hostfs debian chroot /hostfs

# I'm root !

[ Parent | on HN ]
Re:Docker Bug Allows Root Access to Host Filesystem by the8472 on Wednesday May 29, 2019 @10:38AM (#20040720)
The issue is an unprivileged container fooling the host, not the host intentionally escalating to root.
[ Parent | on HN ]
Re:Docker Bug Allows Root Access to Host Filesystem by Leynos on Thursday May 30, 2019 @03:23AM (#20049086)
Indeed. The point discussed in the grandparent relates to indirect access to the daemon. E.g., a process (not under direct user control) communicating with the Docker daemon via http API. The point being that the cp endpoint can be compromized without the user having direct control over the API parameters.
[ Parent | on HN ]