Re:The most popular docker images each contain at least 30 v...
by DyslexicAtheist on Wednesday February 27, 2019 @04:20AM
(#19262057)
> The ops folks I work with banter around the same idea that you're getting at here, that engineers should not have access to the production system they maintain
that is a point, but it wasn't at all _my_ point. with what is available I was referring to the commands that are installed inside the container which allow potential breakout of the container once the container is compromised.
fwiw there is a breaking point with teams that don't restrict access to the production environment. once too many people have access it becomes unmanageable.
that is a point, but it wasn't at all _my_ point. with what is available I was referring to the commands that are installed inside the container which allow potential breakout of the container once the container is compromised.
fwiw there is a breaking point with teams that don't restrict access to the production environment. once too many people have access it becomes unmanageable.