Docker 0.5.2 Released - Security Update
groups.google.com
Docker 0.5.2 Released - Security Update
1–3 of 3 posts
Re: Docker 0.5.2 Released - Security Update
#2is this chroot or root, because, in my experience, don't you NOT want apps running as root? I suppose with containers having sub-level access it would be a difficult decision to choose which was more secure, giving docker full access to everything, or it not having control. It's a shame that its such a difficult place to change it, or that you can't select it at install.
Re: Docker 0.5.2 Released - Security Update
#3is this chroot or root, because, in my experience, don't you NOT want apps running as root? I suppose with containers having sub-level access it would be a difficult decision to choose which was more secure, giving docker full access to everything, or it not having control. It's a shame that its such a difficult place to change it, or that you can't select it at install.
Docker itself requires root privileges to place processes in different namespaces, manipulate their control groups etc.
However, you can very easily drop the privileges of the application running inside each container, with "docker run -u ". This is definitely recommended for several use cases, for example running untrusted code on shared hardware.