title: Docker: --ipc=host and security
body: <p>So in order to get <a href="https://www.x.org/releases/X11R7.7/doc/xextproto/shm.html" rel="noreferrer">MIT-SHM</a> working between application running inside docker container and x11 running on the host, I have to pass <code>--ipc host</code> during starting the container. I've read the documentation about what it's supposed to do.</p>
  
  <p>Assuming the application is NOT running as root (inside the container), what possible attack vectors does this open? In other words, how much does the <code>--ipc host</code> compromise the security?</p>