Browse code

Merge pull request #29485 from ericcurtin/remove-prompt-add-docker-group

Don't encourage adding user to docker group

Vincent Demeester authored on 2017/01/13 02:28:16
Showing 1 changed files
... ...
@@ -137,6 +137,12 @@ echo_docker_as_nonroot() {
137 137
 
138 138
 	Remember that you will have to log out and back in for this to take effect!
139 139
 
140
+	WARNING: Adding a user to the "docker" group will grant the ability to run
141
+	         containers which can be used to obtain root privileges on the
142
+	         docker host.
143
+	         Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface
144
+	         for more information.
145
+
140 146
 	EOF
141 147
 }
142 148