Re:Dockerfile Security Best Practices
by cpuguy83 on Thursday October 15, 2020 @05:12PM
(#24794044)
I like the general idea, but ultimately suffers the same problem in that people have to know about it.
There actually is a setting to set the default bind address already.
[ Parent
| on HN ]
If you can't change the default because of backwards compatibility and inertia, you can at least provide a well-documented, recommended, easy way of fixing the default.
Is there official documentation that tells users to set the default bind address as a best practice?
I wasn't thinking so much of just changing one setting, but rather having a way to easily reconfigure an installation to set multiple settings to improve security.
In addition, elevating this to the status of a command and documenting it as a best practice helps spread awareness.