Sidebar: Docker container escapes / escalation скачать в хорошем качестве

Sidebar: Docker container escapes / escalation

In this video, I exploit a trivial privilege escalation that plagues docker environments. Honestly, it's so prevalent that probably no less than half of the ci/cd pipelines out there are vulnerable to it in some way. If this doesn't work inside your container, you might need to chmod 666 /var/run/docker.sock inside the container. Why's it so easy to root a server? It boils down to either laziness or lack of knowledge about attack surfaces. Giving root to your containers is a sure-fire way to make that annoying error message about "bad permissions" go away. It probably shouldn't be easy to deploy a container. In fact, it should probably be so complicated that you can't do it in the command line without getting all kinds of permission errors. Then, you can let your pipeline manage those permissions and acquire the right credentials. That strategy keeps the desired result of "a credentialed user should be able to spawn authorized containers" easy while avoiding the undesired result of "a rogue piece of code that knows nothing about your creds can't root your box in two lines."