News for hackers. Stuff that matters.

A comment on German BSI withholds Truecrypt security report. Parent comment

Re:German BSI withholds Truecrypt security report by lima on Monday December 16, 2019 @01:01PM (#21805264)
This is also nice for breaking in/out of Docker containers with bind mounts.
[ Parent | on HN ]
Re:German BSI withholds Truecrypt security report by cyphar on Monday December 16, 2019 @02:58PM (#21806563)
Not if you use user namespaces (which you really should).
[ Parent | on HN ]
Re:German BSI withholds Truecrypt security report by lima on Tuesday December 17, 2019 @06:32AM (#21812571)
Which is not the default that Docker uses :(

One more reason to switch to podman, which has sane defaults.

[ Parent | on HN ]
Re:German BSI withholds Truecrypt security report by cyphar on Tuesday December 17, 2019 @08:29AM (#21813215)
Or LXD/LXC which can run containers such that they are isolated from one another in terms of their id mappings.
[ Parent | on HN ]