32 lines
563 B
YAML
32 lines
563 B
YAML
version: '3.8'
|
|
|
|
services:
|
|
web:
|
|
image: ubuntu:latest
|
|
|
|
# CRITICAL: Privileged container
|
|
privileged: true
|
|
|
|
# MEDIUM: No resource limits
|
|
# MEDIUM: No restart policy
|
|
|
|
# HIGH: PID host mode - can see all host processes
|
|
pid: host
|
|
|
|
# HIGH: IPC host mode
|
|
ipc: host
|
|
|
|
volumes:
|
|
# CRITICAL: Root filesystem mounted
|
|
- /:/host
|
|
|
|
# CRITICAL: Proc filesystem
|
|
- /proc:/host-proc
|
|
|
|
# CRITICAL: Sys filesystem
|
|
- /sys:/host-sys
|
|
|
|
# MEDIUM: Running as root (no user specified)
|
|
|
|
command: sleep infinity
|