title: What damages can be done by an untrusted Docker container?
body: <p>Let's suppose I run a docker container with a malware on my Linux machine, what are the damages that can be done?</p>
  
  <p>What's the list of security concerns for running Docker in term of CPU, Memory, Disk I/O, Network I/O, system...?</p>
  
  <p>My first guesses (to complete):</p>
  
  <p>The container will be able to <em>burn</em> my CPU as there is no way to limit the percentage of CPU that the container can use.</p>
  
  <p>It will also have a direct access to my Linux kernel, which might not be really good as well (if not locked down with SE Linux).</p>
  
  <p>Will it be able to completely fill up my disk or inject crappy things into memory?</p>