I wrote a blog a couple of years ago about the docker group.

http://www.projectatomic.org/blog/2015/08/why-we-dont-let-non-root-users-run-docker-in-centos-fedora-or-rhel/

I am not a big fan.

On 10/18/2016 04:39 AM, Stef Walter wrote:
> On 11.10.2016 17:32, fasebet...@gmail.com wrote:
>> Hi list. I have two servers with the same version of cockpit
>> installed (0.114). One appears in the section Container Administrator
>> roles and the other not? it can be? Thank you 
> The 'Container Administrator' role is the 'docker' group. If it doesn't
> exist on the system, then those access rights cannot be conferred on a user.
>
> By the way the 'docker' group has dubious security value. It is
> essentially a root equivalent group without authentication or logging.
> Use at your own risk. The official Docker documentation has warnings
> about it.
>
> Relatedly I've put together a pull request which shows the group in
> question as a tooltip when hovering over the role:
>
> https://github.com/cockpit-project/cockpit/pull/5173
>
> Stef
>
>
>
>> _______________________________________________ cockpit-devel mailing
>> list -- cockpit-devel@lists.fedorahosted.org To unsubscribe send an
>> email to cockpit-devel-le...@lists.fedorahosted.org
>>
>
>
>
> _______________________________________________
> cockpit-devel mailing list -- cockpit-devel@lists.fedorahosted.org
> To unsubscribe send an email to cockpit-devel-le...@lists.fedorahosted.org

_______________________________________________
cockpit-devel mailing list -- cockpit-devel@lists.fedorahosted.org
To unsubscribe send an email to cockpit-devel-le...@lists.fedorahosted.org

Reply via email to