User Namespaces

Difficulty: Advanced

Question

What is User Namespace Remapping?

Answer

It maps the root user inside a container to a non-privileged user on the host, preventing the container-root from having host-root powers if it escapes.

Concepts covered

Security, User Namespace