17
[SOLVED] How am I using docker "rootless" without actually being rootless?
(piefed.zeromedia.vip)
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
Just as a security note: being in the docker group allows root access. If your user is not already a sudoer anyway, they can get root through docker.
So if you run malicious code (like running a bad install script from the wrong github repo or installing the wrong dependency) as that user the attacker can escalate to root without knowing the user password.
(The trick is to create a container and mount /. Then you can edit whatever files you want inside of the container, like editing /etc/passwd and setting a known password for the root user)
That’s a good point, I didn’t realize the implication of that!