4 ms·
They have the same security story as other linux systems.
by justizin 11y ago
They have the same security story as other linux systems.
- mugsie 11y agowhile promising a much better one...
- davexunit 11y agoThat's... just not true.
- justizin 11y agoYou have an SSL vulnerability, you need to patch the docker image, just like you'd have to patch a linux system. Now you say something of substance!
- davexunit 11y agoDocker hosts pre-built images that have known exploits in them. They also bundle insecure versions of libraries with their software: https://github.com/docker/compose/issues/1601 https://github.com/docker/compose/issues/1601
- andrewguenther 11y agoI think the problem here is that people seem to assume that "application isolation" is synonymous with "security isolation." Your statement is true, the vulnerabilities are the same, but people don't seem to get that there is no "security story" for containers in the first place. That isn't their job.
- iguyking 11y agoIsn't one of the claims that if you patch the main OS (without changing the libraries..just patch like you would normally) with a new base image, that with the dockerfile you could re-setup the application in a matter of minutes?