Container breakout through a mounted docker socket

A container with /var/run/docker.sock can start a new privileged container that mounts the host root.