Running a container in privileged mode is dangerous. The extent of a security compromise can go beyond the container itself. Let's see in practice what will happen when a privileged container runs a vulnerable program with the Shellshock bug.
Let's conduct an in-depth analysis of Docker security, categorize its issues, vulnerabilities and insecure configurations as well as a look on how to address them.
Let’s head to the lab to discover, debug, and fix this vulnerability within an actual application.
Containers, protected by kernel features like cgroup and tools like AppArmor, do not offer the same protection as virtual machines. A compromised process in a container can be devastating, and since Docker engine and images often lack secure default settings, it is essential to take time to harden them.
