Comment on Containers and Docker: how secure are they?parentComments−contingencies13yI would like to see an example of that...http://blog.zx2c4.com/749 and http://bit.ly/T9CkqJ−yebyen13yThose are great exploits, but they don't show how to escape from a container at all.−contingencies13yActually they do. The first in most cases for affected kernels, the latter in many cases.−justincormack13yIf you can execute arbitrary code in kernel you can modify anything in any container.−yebyen13yWhat you say seems intuitively correct to me, but I have to ask (because I am a hardcore pedant)... source?
Comments
I would like to see an example of that...
http://blog.zx2c4.com/749 and http://bit.ly/T9CkqJ
Those are great exploits, but they don't show how to escape from a container at all.
Actually they do. The first in most cases for affected kernels, the latter in many cases.
If you can execute arbitrary code in kernel you can modify anything in any container.
What you say seems intuitively correct to me, but I have to ask (because I am a hardcore pedant)... source?