GNU/Linux ◆ xterm-256color ◆ bash 975 views

Demo from DevSecCon19 London

  • Slides
  • Dockerimages
  • Commands:
    $ oc login -u user1
    $ oc create serviceaccount runasprivileged
    $ oc login -u system:admin
    $ oc adm policy add-scc-to-user privileged -z runasprivileged
    $ oc login -u user1
    $ cat <<EOF > 01_priv-po.yaml
    kind: DeploymentConfig
    apiVersion: v1
    metadata:
      name: base-privileged
    spec:
      template:
        metadata:
          labels:
            name: base-privileged
        spec:
          serviceAccountName: runasprivileged
          containers:
            - name: base-privileged
              image: docker.io/ernw/base:latest
              securityContext:
                privileged: true
      replicas: 1
    EOF
    $ oc create -f 01_priv-po.yaml
    $ oc exec -it $($ oc describe rc base-privileged-1 | tail -1 | cut -d \: -f 2) bash
    $ id
    $ hostname
    $ getpcaps $$
    $ ls /dev/vd*