News for hackers. Stuff that matters.

A comment on Remote Code Execution as a Service. Parent comment

Re:Remote Code Execution as a Service by adamgordonbell on Wednesday March 08, 2023 @07:39AM (#35068283)
Interesting! What was the service? IN our case we control the container, which is BuildkitD, but it has to be run privileged, which means lots of solutions are off the table.
[ Parent | on HN ]
Re:Remote Code Execution as a Service by ones_and_zeros on Wednesday March 08, 2023 @11:23AM (#35070936)
Rather not say. Yea building and then running containers where users get to pick the base image is a risk.

We found that privileged is a pretty big hammer and thought we needed it too but we found ways to give us the functionality we needed without all the extra stuff we didn't need the privileged brings in.

[ Parent | on HN ]