4 ms·
Is this serious or just some spreading some FUD? Can you show me an example? Honest question
by tlunter 12y ago
Is this serious or just some spreading some FUD? Can you show me an example? Honest question
- general_failure 12y agoFUD
- stevekemp 12y agoExample here: http://blog.bofh.it/debian/id_413 http://blog.bofh.it/debian/id_413 * Got root in the countainer. * You "know" where that is mapped to on the host, because it is based on the UID of the container which is set as the hostname. * You configure a trigger to run a script, using that knowledge. * Code happens on the host, outside the container.
- general_failure 12y agoThe above example is about LXC and sysfs. We are talking docker which uses aufs.
- stevekemp 12y agoIndeed, this is an LXC attack, rather than docker-specific. But, that said, the attack works as specified against docker 0.11.0. Largely because guests do have sysfs mounted at /sys.
- stevekemp 12y agoPlease see this example - http://blog.bofh.it/debian/id_413 http://blog.bofh.it/debian/id_413