Controlling access to rootless Podman for users

It’s easy to have mistaken assumptions about security controls when it comes to rootless Podman containers.
Dan Walsh
Thu, 6/10/2021 at 1:14pm

Image

Image by Arek Socha from Pixabay

Recently the Podman team received a Bugzilla report claiming that there was no way to stop rootless Podman from running containers. The reporter set up a user account with no entries in /etc/subuid and /etc/subgid and reported that rootless Podman could still run the hello-world container.

Topics:  
Containers  
Linux  
Read More at Enable Sysadmin