News for hackers. Stuff that matters.

A comment on Dockersh – a shell that puts users into individual docker containers.

Re:Dockersh – a shell that puts users into individual docker... by antocv on Wednesday August 27, 2014 @07:33AM (#8231623)
> This allows you to have a single ssh process on the normal ssh port which places user sessions into their own individual docker containers in a secure and locked down manner.

No! Warning!

Docker is not secure and locked down. Do not use this for "security".

[ Parent | on HN ]
Re:Dockersh – a shell that puts users into individual docker... by StavrosK on Wednesday August 27, 2014 @10:19AM (#8232198)
Sure, but it's secure enough for giving friends access to my laptop without them being able to look around the rest of the system.
[ Parent | on HN ]
Re:Dockersh – a shell that puts users into individual docker... by antocv on Thursday August 28, 2014 @08:13AM (#8236814)
GNU/Linux and ssh is already secure enough for that. File permissions, so they cant see your files.
[ Parent | on HN ]
Re:Dockersh – a shell that puts users into individual docker... by StavrosK on Thursday August 28, 2014 @08:41AM (#8236904)
They can't see the homedir, but they can still see config files and anything else that couldn't be conveniently locked down.
[ Parent | on HN ]
Re:Dockersh – a shell that puts users into individual docker... by milkshakes on Wednesday August 27, 2014 @11:26AM (#8232607)
just as long as you don't give them root...
[ Parent | on HN ]