HNGlance

Top Best New Show

Docker breakout exploit analysis

https://medium.com/@fun_cuddles/docker-breakout-exploit-analysis-a274fff0e6b3

by jenandre • 12 years ago

16 2 12 years ago

ME

Related Stories

Loading related stories...

Comments

2

amluto• 12 years ago

sigh

Linux has had user namespaces for a while, and user namespaces solve this problem.

Yes, they have their share of bugs (I've found quite a few of them), but they're far better than doing containerization with funny cgroup games and crossed fingers (i.e. what Docker does now).

philips• 12 years ago

This is coming to Docker. libcontainer is getting support for user namespaces[1] and the Docker engine will have a static configurable root map once the changes land.

[1] https://github.com/docker/libcontainer/pull/23

Source preview

medium.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms