Docker 1.10 Security Features, Part 3: User Namespace
In the last 2 posts about the main security features in Docker 1.10 we tackled the Authorization plug-in and the Secomp profiles. In this final post we’ll focus on the new support for Linux User Namespace. Before the release of Docker 1.10, a container running under user=root in Docker would have run as root also on the host …