A municipal low-privilege account is a member of the Docker group on a Linux host. Conceptually, how should the tester frame that membership?
Select an answer to reveal the explanation.
Short Explanation
Membership in the Docker club is often like holding the keys to the whole machine, not just a peek at a guest list. Control of the Docker socket frequently means you can run containers that punch through to the host. Treat it as root-equivalent risk class, not a harmless convenience group.
Full Explanation
Users who can talk to the Docker daemon—via group membership or direct docker.sock access—can typically start privileged containers, mount host paths, or otherwise break isolation. In privilege-escalation assessments this is framed as host root-equivalent conceptually, not as a cosmetic listing right. It does not imply AppArmor enforcement and should not be downgraded to informational SNMP-style noise. Document the finding and any RoE limits before demonstrating impact.