https://bugzilla.redhat.com/show_bug.cgi?id=1119282
Stef Walter <stefw(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |stefw(a)redhat.com
--- Comment #27 from Stef Walter <stefw(a)redhat.com> ---
The difference between privilege escalation via sudo and that via docker is
that the former is audited, logged, and uses a well known privilege escalation
path.
Privilege escalation via the docker group (which is correctly not present by
default) is not audited, cannot be logged, is wide open, does not respect
SELinux contexts.
Even the upstream Docker project warns against this.
--
You are receiving this mail because:
You are on the CC list for the bug.