Comment on Breaking Out of Docker via RunCComments−yutghgh7yThis is very interesting, because most docker break outs I see are exploits in the linux kernel, but this is one of the few in the containerization components themselves (first one I remember in runC).−cpuguy837yDefinitely not the first. There was one with leaking file descriptors which weren't opened with O_CLOEXEC.Another with ptrace (fixed by making the process non-dumpable).
Comments
This is very interesting, because most docker break outs I see are exploits in the linux kernel, but this is one of the few in the containerization components themselves (first one I remember in runC).
Definitely not the first. There was one with leaking file descriptors which weren't opened with O_CLOEXEC.
Another with ptrace (fixed by making the process non-dumpable).