microsoft / microsoft/hcsshim

[Question] Around container USER mode and kernel capabilities

Open
#1,050 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
694
Forks
304
Avg merge
1d 19h
Merged PRs (30d)
28

Description

Hi,
I have 2 questions around Windows container user mode and capabilities.

  1. Can a container running as ContainerAdministrator gain admin privileges on the underlying host? Or does ContainerAdministrator mean root access within the container ONLY?

  2. Is there a way to add/delete runtime capabilities for Windows containers? (like Linux kernel capabilities) Reference

Please let me know if you want me to elaborate further. I would really appreciate some help, thank you!
-Anuj

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files, tests, or entry points are identified. Start by reviewing the Windows container user-mode and capability questions in the issue alongside the linked Docker Linux capabilities reference; done means providing authoritative answers or documenting the supported behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
operating-systems, security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.