Don't encourage adding user to docker group
| ... | ... |
@@ -137,6 +137,12 @@ echo_docker_as_nonroot() {
|
| 137 | 137 |
|
| 138 | 138 |
Remember that you will have to log out and back in for this to take effect! |
| 139 | 139 |
|
| 140 |
+ WARNING: Adding a user to the "docker" group will grant the ability to run |
|
| 141 |
+ containers which can be used to obtain root privileges on the |
|
| 142 |
+ docker host. |
|
| 143 |
+ Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface |
|
| 144 |
+ for more information. |
|
| 145 |
+ |
|
| 140 | 146 |
EOF |
| 141 | 147 |
} |
| 142 | 148 |
|