VirtualTam's bookmarks

1. Secure Your Containers with this One Weird Trick – Red Hat Enterprise Linux Blog 2016-10-19

   tags: capabilities, linux, linux/container, linux/container/docker, root, security

   [ permalink ]

   Docker allows dropping the root account's Linux capabilities

   • http://man7.org/linux/man-pages/man7/capabilities.7.html
   • https://www.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.2/capfaq-0.2.txt