Question about Windows Containers with Docker security model. Let's suppose that we have a Host operating system, Windows Server 2016 with Containers feature enabled, which we install Docker on. Let's suppose the Host OS is named TestHost. Now let's suppose that we deploy a container called AdminTest onto the host TestHost, and let's suppose that we do NOT grant access to the host OS filesystem when we do docker run. Let's suppose that there is a process called ProcessX inside AdminTest which has Administrator permissions.

Can this process ProcessX access files in the TestHost file system? Can the process ProcessX do anything to the TestHost generally by virtue of it being an "Administrator"?

I believe the answer is "No" but I want to confirm.

Any guidance with this is greatly appreciated. Am new to Windows Containers, liking them so far.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.