409
Life finds a way (lemmy.ml)
submitted 5 months ago by to c/programmer_humor@programming.dev
45 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 52 points 5 months ago (7 children)

Sudo makes you enter your password and docker doesn't?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 43 points 5 months ago (1 child)

    Docker does by default - it only works if you use sudo. But the docs tell you to add yourself to the docker group (which requires sudo to do). Then running docker doesn’t require sudo anymore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 51 points 5 months ago

    Yeah, that's a terrible decision in the docs. Don't ever add a path where anything on the shell can execute user-modifyable code as root.

    As soon as you do that, you lose any protection that comes from separating root users and non-root users. Because now any malicious program can just use docker to elevate its code to root.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 9 points 5 months ago (2 children)

    Sudo can/usually does ask for password - but if you're feeling lucky you can use sudo without a password.

    (Currently doing that after repeatedly failing to install an OS and have not yet felt compelled to change it back).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •