https://bugzilla.redhat.com/show_bug.cgi?id=1119282
Stef Walter stefw@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |stefw@redhat.com
--- Comment #27 from Stef Walter stefw@redhat.com --- The difference between privilege escalation via sudo and that via docker is that the former is audited, logged, and uses a well known privilege escalation path.
Privilege escalation via the docker group (which is correctly not present by default) is not audited, cannot be logged, is wide open, does not respect SELinux contexts.
Even the upstream Docker project warns against this.