Comment on Show HN: Yolobox – Run AI coding agents with full sudo without nuking home dirparentComments−FinbarrOP7moClaude was unable to escape but I'm going to try the other tools later as well.Here's what Claude Code tried:- Docker socket (/var/run/docker.sock) → Not mounted- Capabilities → CapPrm=0, CapEff=0 - no elevated caps- Cgroup escape → Mount denied (no CAP_SYS_ADMIN)- Device access → Only minimal /dev entries, no block devices- Path traversal on /workspace → Resolves inside container (kernel prevents mount escape)- Symlink to host paths → Resolves inside container namespace- Ptrace → Restricted (ptrace_scope=1)- Cloud metadata → No response- Docker API → Not exposedSecurity profile: Seccomp mode 2, AppArmor docker-default (enforce)
Comments
Claude was unable to escape but I'm going to try the other tools later as well.
Here's what Claude Code tried:
- Docker socket (/var/run/docker.sock) → Not mounted
- Capabilities → CapPrm=0, CapEff=0 - no elevated caps
- Cgroup escape → Mount denied (no CAP_SYS_ADMIN)
- Device access → Only minimal /dev entries, no block devices
- Path traversal on /workspace → Resolves inside container (kernel prevents mount escape)
- Symlink to host paths → Resolves inside container namespace
- Ptrace → Restricted (ptrace_scope=1)
- Cloud metadata → No response
- Docker API → Not exposed
Security profile: Seccomp mode 2, AppArmor docker-default (enforce)