Skip to content
Understanding Docker container escapes
blog.trailofbits.com | blog | #kubernetes | #linux | #exploit | #containers | #docker | #container-escape | #cgroups | #privileged-containers
Summary
Breaks down Felix Wilhelm's cgroups release_agent container escape PoC: root plus SYS_ADMIN, no AppArmor, and writable cgroup v1 suffice—warning against --privileged Docker containers.
- Published
- Collected