Don't encourage adding user to docker group
(cherry picked from commit 06e3812b6e50f63b13b9a6eefb012da83f6283ab)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
| ... | ... |
@@ -78,6 +78,12 @@ echo_docker_as_nonroot() {
|
| 78 | 78 |
|
| 79 | 79 |
Remember that you will have to log out and back in for this to take effect! |
| 80 | 80 |
|
| 81 |
+ WARNING: Adding a user to the "docker" group will grant the ability to run |
|
| 82 |
+ containers which can be used to obtain root privileges on the |
|
| 83 |
+ docker host. |
|
| 84 |
+ Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface |
|
| 85 |
+ for more information. |
|
| 86 |
+ |
|
| 81 | 87 |
EOF |
| 82 | 88 |
} |
| 83 | 89 |
|