Mastering Linux Security and Hardening - Second Edition

Hands-on lab – Creating an evil Docker container

To demonstrate, I'll use a CentOS 7 VM in order to show how SELinux can help protect you. (I'm using CentOS 7 because RHEL 8/CentOS 8 have a new type of Docker system, which works differently.) Also, you'll need to do this from the local console of the VM because the root user will be locked out from logging in via SSH (you'll see what I mean in just a bit):

1. On your CentOS 7 VM, install Docker and enable the daemon:

sudo yum install dockersudo systemctl enable --now docker

2. Create the docker group.

sudo groupadd docker

3. Create a user account for Katelyn, my teenage calico kitty, adding her to the docker group at the same time:

sudo useradd -G docker katelynsudo passwd katelyn

4. Log out of ...