equivocal comments on Omarchy: Any User Process Can Escalate to Root

Omarchy: Any User Process Can Escalate to Root (0xcc.io)

submitted 1 month ago by cm0002@toast.ooo to c/linux@programming.dev

12 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] equivocal@piefed.social 6 points 1 month ago (1 child)

The issue is that the docker service runs as root and their defaults added the user to a group that allows them to control that service without sudo

So, the root filesystem can just be passed as a volume to a container and then do whatever you want from there.

parent

hideshow 1 child comment

[–] NaibofTabr@infosec.pub -1 points 1 month ago

OK, so if you can pass the host root filesystem to a container and then write files or execute code with root privileges on that filesystem, I would definitely consider that a container escape. You're executing arbitrary code on the host from within a container.

parent