Also allow docker in containers spawned by an authorized app

2018-08-15 12:35:34 +02:00
parent c3dacba894
commit 4f336a05fc
3 changed files with 22 additions and 2 deletions
--- a/src/dockerproxy.js
+++ b/src/dockerproxy.js
@@ -27,6 +27,7 @@ function authorizeApp(req, res, next) {
    // - block apps not using the docker addon
    // - block calls regarding platform containers
    // - only allow managing and inspection of containers belonging to the app
+    // - allow docker to be called from child containers spun of from an authorized app

    if (config.TEST) return next(); // make the tests pass for now