[Security Vulnerability] docker group is root equivalent

Bijman / srb2bld

POSIX shell script that eases compiling, installing or creating AppImage/Flatpak/App Bundle/Android APKs of Sonic Robo Blast 2 related builds.

MIT License

9 stars 2 forks source link

[Security Vulnerability] docker group is root equivalent #16

Closed olifloof closed 2 years ago

olifloof commented 2 years ago

See https://github.com/moby/moby/issues/9976

Bijman commented 2 years ago

Security concerns there imply that user is in docker group AND docker run command is executed with option --privileged, which the latter script doesn't use, because of those risks.