4 ms·
The Docker team did quite a bit of work (e.g. establishing Apparmor/SELinux profiles, creating seccomp policies, deciding on acceptable capabilities) in the rel
by rtempaccount1 7y ago
The Docker team did quite a bit of work (e.g. establishing Apparmor/SELinux profiles, creating seccomp policies, deciding on acceptable capabilities) in the relatively early days of Docker. TBH those haven't changes much in quite a few versions now (AFAIK), so a lot of the foundational work was done early on.
- o-__-o 7y agoThere was a time when docker was production ready and the security check of containers was merely a stub that acted like it was checking things but didn’t really do anything. Please don’t rewrite history
- rtempaccount1 7y agoI wouldn't suggest I am re-writing history. What's your definition of "production ready"?