Container-escape Memes

Someone just casually exploited Docker group privileges to gain root access without actually using sudo. Beautiful. The questioner is confused because sudo wasn't used, but our clever protagonist realized their user was in the docker group—which is basically a skeleton key to root access. They spun up a container with host filesystem bind-mounted as writable, then used install to overwrite a critical system config file. The -m 0644 sets permissions, -o 0 -g 0 makes it owned by root:root. It's like breaking into a house through the doggy door when the front door needs a key. Security folks everywhere just felt a disturbance in the force.