https://leikah.haoyingcao.xyz/en/tags/docker/Recent content in Docker on LEIKAHHugoenhttps://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/permission/priv_groups/Mon, 01 Jan 0001 00:00:00 +0000https://leikah.haoyingcao.xyz/en/docs/priv_esc/linux/permission/priv_groups/<p>Certain groups give their members high privileges that can be abused to obtain root access on the host. Below are some examples:</p> <h2 id="lxclxd">LXC/LXD<a class="td-heading-self-link" href="#lxclxd" aria-label="Heading self-link"></a></h2> <p>LXD is similar to Docker and is Ubuntu&rsquo;s container manager. Upon installation, all users are added to the LXD group.</p> <div class="highlight"><pre tabindex="0" style="color:#d8dee9;background-color:#2e3440;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-shell-session" data-lang="shell-session"><span style="display:flex;"><span>devops@NIX02:~$ id </span></span><span style="display:flex;"><span><span style="color:#bf616a"> </span></span></span><span style="display:flex;"><span>uid=1009(devops) gid=1009(devops) groups=1009(devops),110(lxd) </span></span></code></pre></div><p>Membership in the LXD group can be used to escalate privileges by creating an LXD container, making it privileged, and then accessing the host file system at <code>/mnt/root</code>.</p>