undefined | Better HN

0 pointsamelius2y ago0 comments

Also side-channel attacks.

E.g. if one user downloads a container, and then for another user it is already in the cache, this gives the other user information about the first user.

0 comments

Fire-Dragon-DoL2y ago

Isn't this pointless, since if the other user has access to docker, they basically have root access to the machine?

ameliusOP2y ago

I don't think users need to have root access to use Docker.

Fire-Dragon-DoL2y ago

No, but unless they run in rootless mode, they can mount any directory and write on it as root

seba_dos12y ago

They don't, but if you have given them access to Docker then it's just as if you had given them access to root.

j / k navigate · click thread line to collapse

0 comments

Fire-Dragon-DoL2y ago

Isn't this pointless, since if the other user has access to docker, they basically have root access to the machine?

ameliusOP2y ago

I don't think users need to have root access to use Docker.

Fire-Dragon-DoL2y ago

No, but unless they run in rootless mode, they can mount any directory and write on it as root

seba_dos12y ago

They don't, but if you have given them access to Docker then it's just as if you had given them access to root.

j / k navigate · click thread line to collapse