Post #4150370

@ramsey@phpc.social @GuillaumeRossolini@infosec.exchange nod. You need to accept that if you give it a bash tool, it can run any command it wants regardless of what prompting you gave it, so you need to treat it as an untrusted adversary. Definitely don't mount the docker-socket-gateway-to-root in there! I think the only "sane" way to manage these things is to use kernel level stuff to block them, which is not usually very flexible.