Avoid Using Lazy, Privileged Docker Containers
|
|
Running your container using privileged mode opens up a world of pain if your container is abused. Not only are your host's resources directly accessed with impunity by code within your container (a little like enabling the omnipotent CAP_SYS_ADMIN capability) but you're also relinquishing the cgroups resource limitations which were added to the kernel as a level of protection, too.
|
|
Full Story |
This topic does not have any threads posted yet!
You cannot post until you login.
