3 ms·
You should not include binaries not needed for production for security reasons, not because of size alone.
by mkesper 7y ago
You should not include binaries not needed for production for security reasons, not because of size alone.
- remram 7y agoCan you elaborate on this? If someone pwned my container and is able to execute commands, what does it change whether they get to use a text editor? Otherwise, what does it change whether unused programs are around?
- geezerjay 7y agoI believe the whole point is that adding unnecessary software to a container also increases the attack surface unnecessarily.