[Bug 1923148] Re: docker.io opening root access when user is in docker group

2021-04-11 Thread Hadmut Danisch
It is possible remotely if you have one of those docker images (e.g. all those CI/CD tools) that need to start further docker containers and therefore need access to the docker unix domain socket, which is mounted into the docker image with a regular volume mount. Once a docker image has access to

[Bug 1923148] Re: docker.io opening root access when user is in docker group

2021-04-09 Thread Seth Arnold
Hello Hadmut, thanks for the report; I've been unwilling to try Docker myself for this reason. I read the source code everything I run that doesn't come from the Ubuntu archive, and don't see how that's remotely possible with Docker images. It's probably best to discuss options with Docker