Question about Windows Containers with Docker security model. Let's suppose that we have a Host operating system, Windows Server 2016 with Containers feature enabled, which we install Docker on. Let's suppose the Host OS is named
TestHost. Now let's suppose that we deploy a container called
AdminTest onto the host
TestHost, and let's suppose that we do NOT grant access to the host OS filesystem when we do docker run. Let's suppose that there is a process called
AdminTest which has Administrator permissions.
Can this process
ProcessX access files in the
TestHost file system? Can the process
ProcessX do anything to the
TestHost generally by virtue of it being an "Administrator"?
I believe the answer is "No" but I want to confirm.
Any guidance with this is greatly appreciated. Am new to Windows Containers, liking them so far.