409
Life finds a way (lemmy.ml)
submitted 5 months ago by to c/programmer_humor@programming.dev
45 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 43 points 5 months ago (1 child)

Docker does by default - it only works if you use sudo. But the docs tell you to add yourself to the docker group (which requires sudo to do). Then running docker doesn’t require sudo anymore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 51 points 5 months ago

    Yeah, that's a terrible decision in the docs. Don't ever add a path where anything on the shell can execute user-modifyable code as root.

    As soon as you do that, you lose any protection that comes from separating root users and non-root users. Because now any malicious program can just use docker to elevate its code to root.

  • permalink
  • fedilink
  • source
  • parent