Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If this is CVE, what is Docker then? :)

Anyone with privileges to run docker image is basically root on your host.



This is why you should never add your user to the docker group. Just use `sudo docker` or put your docker commands in a script that can only be edited by root and execute the script via sudo with NOPASSWD.


Much better: replace Docker with https://podman.io/, which runs with user privileges, no root.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: