News for hackers. Stuff that matters.

A comment on 51% of 4M Docker images have critical vulnerabilities. Parent comment

Re:51% of 4M Docker images have critical vulnerabilities by Cthulhu_ on Thursday December 17, 2020 @08:08AM (#25455210)
It does allow you to exit the boundaries of the application though, and e.g. extract the application's database.

That said, is it possible to disable superuser access entirely in a container? Can't login as root if there is no root.

[ Parent | on HN ]
Re:51% of 4M Docker images have critical vulnerabilities by nix23 on Thursday December 17, 2020 @08:14AM (#25455259)
https://developers.redhat.com/blog/2020/09/25/rootless-conta...
[ Parent | on HN ]
Re:51% of 4M Docker images have critical vulnerabilities by mattacular on Thursday December 17, 2020 @08:11AM (#25455231)
Docker has a user namespacing feature which can be used to harden container images and also a newer way to run rootless altogether - https://docs.docker.com/engine/security/rootless/
[ Parent | on HN ]
Re:51% of 4M Docker images have critical vulnerabilities by dec0dedab0de on Thursday December 17, 2020 @08:40AM (#25455443)
If the application user has access to the database, it doesn't matter if you get access to root or not.
[ Parent | on HN ]