Re: docker VMM breakout

[Yves-Alexis Perez <corsac () debian org>]

On mer., 2014-06-18 at 20:15 +1000, David Jorm wrote:
> Thanks for reporting this issue, Sebastian. Could a CVE ID please be 
> assigned to this issue, given it affects Docker 0.11?

It also applies to LXC, where dropping CAP_DAC_OVERRIDE and
CAP_DAC_SEARCH might not be completely possible if you're running a full
system in a container (I'm not completely sure of that so any clue is
welcome here).

Regards,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part