News for hackers. Stuff that matters.

A comment on Does Your Startup Need Complex Cloud Infrastructure?. Parent comment

Re:Does Your Startup Need Complex Cloud Infrastructure? by Timber-6539 on Friday September 13, 2024 @08:49AM (#41530747)
Insecure in what way? Rootful docker is a mature product that comes with seccomp and standard apparmor policies ootb!
[ Parent | on HN ]
Re:Does Your Startup Need Complex Cloud Infrastructure? by otabdeveloper4 on Friday September 13, 2024 @03:15PM (#41534197)
It runs as root, requires sudo to use, turns off all system firewalls, and has no way of doing security updates for containers.
[ Parent | on HN ]
Re:Does Your Startup Need Complex Cloud Infrastructure? by Timber-6539 on Friday September 13, 2024 @11:05PM (#41537177)
> It runs as root

A lot of system applications on a standard Linux machine run as root or run with rootful permissions. This problem is solved by sandboxing, confining permissions and further hardening.

> requires sudo to use

Yes. However, this is a security plus and not a disadvantage.

> turns off all system firewalls

This statement makes no sense.

> has no way of doing security updates for containers.

I don't know what you mean by this.

[ Parent | on HN ]