Re:Docker container security cheat sheet
by etaioinshrdlu on Tuesday August 03, 2021 @03:11AM
(#28046462)
Are these vulnerabilities actual bugs, or just misfeatures?
[ Parent
| on HN ]
Re:Docker container security cheat sheet
by noobquestion81 on Tuesday August 03, 2021 @03:39AM
(#28046623)
actual bugs, qualys’s recent cve-2021-33909 is one example.
Re:Docker container security cheat sheet
by noobquestion81 on Wednesday August 04, 2021 @12:09AM
(#28057196)
To clarifymy stance, now that I have a bit more time this evening… unprivileged userns is the only way forward for linux sandboxing on a bare-metal host past the boundaries of POSIX isolation. so from a security perspective I do hope most distros get this turned on at some point, and that these bugs stop being so commonplace.