News for hackers. Stuff that matters.

A comment on Analysis on Docker Hub malicious images: Attacks through public container images.

Re:Analysis on Docker Hub malicious images: Attacks through ... by exabrial on Wednesday November 23, 2022 @09:58PM (#33727378)
Don't use Docker. Use heavy sigh systemd security features. Yes, this is something that systemd actually does really well. And it keeps all your processes and files visible and inspectable to standard unix tools (ps, htop, ls, etc).

* chroot * cgroups * PrivateNetwork * PrivateTmp * isolated devices * IPAddressAllow * SocketBindAllow * ReadOnlyPaths

https://docs.arbitrary.ch/security/systemd.html

[ Parent | on HN ]
Re:Analysis on Docker Hub malicious images: Attacks through ... by josephcsible on Wednesday November 23, 2022 @10:06PM (#33727409)
Docker doesn't hide your processes from ps.
[ Parent | on HN ]