Machine-translated by Google. Questions are authored in English.
Top

Discussion

State whether the following is true or false.
Running a container as root inside the container is entirely safe because of namespace isolation.

  • A.True only at large scales
  • B.False only at small scales
  • C.True
  • D.False

Answer: D

Root in the container maps to a privileged context that makes an escape considerably more damaging. Running as an unprivileged user, or using user namespaces, is standard practice. Namespaces are not a security boundary alone.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.