In a docker container I am reading the files /proc/stat and /proc/meminfo. As I understand they are the ones of the host. (Not local to the docker container)
In a meeting, a co-worker said that this is a security breach and must be vetted by internal security consultants.
The container does neither run privileged, nor as root. My program inside the container does neither.
Question 1: is he right in saying, that this is a security breach?
Question 2: What if I bind-mounted the host's /proc directory to some folder of the container. Would that then be a security breach?