Re:Kata Containers: The speed of containers, the security of...
by nicce on Wednesday October 04, 2023 @01:39PM
(#37768808)
It might feel frustrating, but there is a great reason.
It gives you a more secure environment.
When Docker just "works", you are unaware of the fact that you have given more permissions than app might actually need, increasing the attack vector.
Podman's use of SELinux prevents and mitigates many of these issues what you will have if somone targets your app.
Podman's use of SELinux prevents and mitigates many of these issues what you will have if somone targets your app.