I have read cap_dac_override is enabled my default on docker.

This capability allows a container to write files on the host.

But i do not understand if this writing capability only applies on mounted volumes on or the whole host file system ? If so, isn't it a security hole ?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.