4 ms·
What do you do as mitigation if one application has a remote execution? I use containers as a security layer.
by kenniskrag 6y ago
What do you do as mitigation if one application has a remote execution? I use containers as a security layer.
- lmm 6y agoContainers have a pretty poor security record. Frankly I'd feel more safe with a non-containerised service running under a non-root user than with a service running as root in a container, not that I'd feel particularly safe with either.
- cfcosta 6y agoContainers != Docker. Podman supports rootless containers for quite a while, without a daemon, and it is compatible with Kubernetes.