Wouldn't the lxc group have much more focused permissions than sudo? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mixmastamyk on Feb 11, 2021 | parent | context | favorite | on: Podman: A Daemonless Container Engine

Wouldn't the lxc group have much more focused permissions than sudo?

ta988 on Feb 12, 2021 [–]

You can mount the root fs in a container and with uid mapping and because the daemon is running as root you can pretty much do whatever you want.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact