← Back to context

Comment by ale42

2 months ago

Wasn't it well-known that putting people in the docker group is basically the same as giving them root rights?

Since new people start work/college/hobby every year, well-known lessons have to be learned again and again.

Was it really though? Yes, Docker has become so ubiquitous that you probably can't get a job as a dev anymore without knowing about it, but I wouldn't trust most users to know these specifics. At the very least it is probably less known than sudoer or SUID misconfiguration risk, and even those are not what I'd call "general knowledge" that everyone who uses it knows about.