News for hackers. Stuff that matters.

A comment on Leaky Vessels flaws allow hackers to escape Docker, runc containers.

Re:Leaky Vessels flaws allow hackers to escape Docker, runc ... by Wool2662 on Sunday February 04, 2024 @03:33PM (#39254135)
Frankly if a user can run the docker command he is basically root anyways. That's why you do not add random users to the docker group.
[ Parent | on HN ]
Re:Leaky Vessels flaws allow hackers to escape Docker, runc ... by westurner on Sunday February 04, 2024 @07:15PM (#39255915)
Podman (and Docker) do rootless containers, which would limit privilege escalation from this vuln, too IIUC

Does container-selinux limit this container escape vulnerability?

[ Parent | on HN ]