Not if you use user namespaces (which you really should). | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

cyphar on Dec 16, 2019 | parent | context | favorite | on: German BSI withholds Truecrypt security report

Not if you use user namespaces (which you really should).

lima on Dec 17, 2019 [–]

Which is not the default that Docker uses :(

One more reason to switch to podman, which has sane defaults.

cyphar on Dec 17, 2019 | [–]

Or LXD/LXC which can run containers such that they are isolated from one another in terms of their id mappings.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact