8 ms·
If this is CVE, what is Docker then? :) Anyone with privileges to run docker image is basically root on your host.
by mixologist 7y ago
If this is CVE, what is Docker then? :)
Anyone with privileges to run docker image is basically root on your host.
- imtringued 7y agoThis is why you should never add your user to the docker group. Just use `sudo docker` or put your docker commands in a script that can only be edited by root and execute the script via sudo with NOPASSWD.
- ahachete 7y agoMuch better: replace Docker with https://podman.io/ https://podman.io/, which runs with user privileges, no root.