Docker execs strings to boot up linux containers

Docker execs strings to boot up linux containers(github.com)

10 points by rxaxm 11 years ago

Rantenki 11 years ago |

Why is this a problem at all? There is no user supplied input here. There is some string mangling in commands below, but it looks like none of it can be manipulated by a malicious user. It's not a security issue. It sounds like OP just thinks that subprocesses are icky.

peterwwillis 11 years ago | |

It's not a problem. The poster didn't put a description of what the issue was, so I would say this post should be flagged, personally

PeterWhittaker 11 years ago | | |

Well, not necessarily. It would be much less of a problem if a) a full path name were provided and b) care was taken to ensure that the path name separator had not been overridden.

As written, or with 'a' but not 'b', there may be a possibility of an attacker manipulating $PATH to cause their own identically-named executable to be invoked with Docker's own privileges.

grumbles 11 years ago |

Worth noting that this is in the 'lxc' execution driver, which is no longer the default. The 'native' driver here is now the default: https://github.com/docker/docker/tree/master/daemon/execdriv...

rxaxm 11 years ago |

rather than the golang wrapper by the lxc team: https://github.com/lxc/go-lxc

dz0ny 11 years ago | |

Problem is because C LXC ABI is unstable and would prevent building docker under osx or win. ALso under linux you would need at least sources for liblxc(they are different for each distribution) and unstable docker daemon which is locked to specific distribution with specific version of LXC ABI is a bad thing.

ntonozzi 11 years ago | |

If you think there is a better way to do it, you can send a pull request.