Security issues, multiple users without a password inside the container and old kernel

[NotMainstream]

Security issues, multiple users without a password inside the container and old kernel

[89luca89]

Hi @NotMainstream

Using rootless podman means that users inside the container have AT MOST the same privilege as your user

Also those users are set by distros not by distrobox, and are service user, not real users with shell access
You have the same ones on you host distro. That's just how Unix style service works.

Also a kernel inside the container doesn't make sense, a container always uses Host's kernel
Containers are not virtual machines

[NotMainstream]

I found out after opening this issue that those users don`t have shell access so they are safe and also that distrobox uses the host kernel which makes total sense. I fell embarrassed of opening this, please delete it altogether.