4 ms·
I can't say my apparmor experiences have been great. SELinux and Apparmor are just two heads of the same problematic coin. As other comments on here point out,
by bragr 5y ago
I can't say my apparmor experiences have been great. SELinux and Apparmor are just two heads of the same problematic coin. As other comments on here point out, it's easier to have one sane policy for docker and containerize everything else.
- someguydave 5y agoHow is your docker policy not something like: “give docker access to everything” ?
- _8j50 5y agoHow the hell do I dockerize firefox or vbox? I get it for server workloads but I was talking from a desktop perspective. Even if that is possible seems like even more stuff to manage and troubleshoot. Also, you are not supposed to ise containers as a security boundary??