Reply to post: Nothing new or unique

How secure is Docker? If you're not running version 1.3.2, NOT VERY

foo_bar_baz
Boffin

Nothing new or unique

"If a management application allows users to upload pre-created disk images in non-raw formats, it can be tricked into giving the user access to arbitrary host files via the copy-on-write backing file feature ... always validate that a disk image originating from an untrusted source has no backing file set" https://libvirt.org/secureusage.html

Docker just happens to be very promiscuous with image files, so the threat is fairly significant.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon