Root hozzáférést tesz lehetővé a host rendszer fájlrendszeréhez egy Docker bug

Titkosítás, biztonság, privát szféra

All of the current versions of Docker have a vulnerability that can allow an attacker to get read-write access to any path on the host server. The weakness is the result of a race condition in the Docker software and while there’s a fix in the works, it has not yet been integrated. [..] Sarai notified the Docker security team about the vulnerability and, after talks with them, the two parties agreed that public disclosure of the issue was legitimate, even without a fix available, in order to make customers aware of the problem

Részletek a Decipher blogjában.

( Atekka | 2019. 05. 30., cs – 11:11 )

Na ne, mindent meg lehet hekkelni. Nem is gondoltam volna.

( answ | 2019. 05. 30., cs – 12:21 )

"The most complete solution to this problem would be to modify chrootarchive so that all of the archive operations occur with the root as the container rootfs (and not the parent directory, which is what causes the vulnerability since the parent is attacker-controlled). Unfortunately, changes to this core piece of Docker are almost impossible (the TarUntar interface has many copies and reimplementations that would all need to be modified to be able to handle a new ‘root’ argument),” Sarai said in the pull request on GitHub.

“So, we instead settle for the next-best option which is to pause the container during our usage of the filesystem. This is far from an ideal solution (you can image some attack scenarios such as shared volume mounts) where this is ineffectual but it does block the most basic attack.”

És a java még hátravan:
Sarai said he hasn’t received any word from Docker officials on when the fix will be integrated, and Docker officials did not respond to an inquiry on timing for the fix.
WTF?

( YleGreg | 2019. 05. 30., cs – 13:09 )

Tévedés, ez csupán az EDD A HASAST! kihívásra adott válasz, vagyis az Easy Deployed Decentralized Automatic High Avability Solution for Administrative System Technologie néven futó megoldás a feledékeny Dev Rendszer Opsz Gazdák számára akik kicsukják magukat a rendszereikből aztán sírnak, hogy a hülye titkolózások miatt (ami már az egész IT szakmát megfertőzte!) nem tudnak belépni a lábtörlő alatt hagyott "baj esetén feltörni!" feliratú SSH kulcsukkal, mert megb4szarintja őket a biztonsági osztály. Esernyővel.

Szóval ez nem bug, hanem feature.
De szerintem Ti is ugyanerre gondoltatok, mégpedig egyből, amikor elolvastátok a hírt. :-)

( iron v | 2019. 05. 30., cs – 13:14 )

Kinek a blogjában lehet többet olvasni? DeepURL pls...