Linux

14869 readers

197 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

Omarchy: Any User Process Can Escalate to Root (0xcc.io)

submitted 3 days ago by cm0002@toast.ooo to c/linux@programming.dev

12 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] equivocal@piefed.social 6 points 2 days ago (1 children)

The issue is that the docker service runs as root and their defaults added the user to a group that allows them to control that service without sudo

So, the root filesystem can just be passed as a volume to a container and then do whatever you want from there.

[–] NaibofTabr@infosec.pub -1 points 2 days ago

OK, so if you can pass the host root filesystem to a container and then write files or execute code with root privileges on that filesystem, I would definitely consider that a container escape. You're executing arbitrary code on the host from within a container.