Comment on Mbox – A lightweight sandboxing mechanismparentComments−jdiez1712yNon-root users can start their own Docker images, if you change the permissions on the UNIX socket.−brokenparser12yYou might as well give them password-less sudo. Also, why are you changing permissions on the socket at all? The default is 660 which seems perfectly fine to me, if it's currently 666 you just gave everything on your box free root access.Read this https://github.com/dotcloud/docker/issues/1369
Comments
Non-root users can start their own Docker images, if you change the permissions on the UNIX socket.
You might as well give them password-less sudo. Also, why are you changing permissions on the socket at all? The default is 660 which seems perfectly fine to me, if it's currently 666 you just gave everything on your box free root access.
Read this https://github.com/dotcloud/docker/issues/1369