How to add a new security layer in Docker using AppArmor?

3 years ago www.padok.fr

Summary: This is a summary of an article originally published by the source. Read the full original article here →

https://www.padok.fr/ https://www.padok.fr/en/blog https://www.padok.fr/en/blog/tag/security https://www.padok.fr/en/blog/security-docker-apparmor It implements Mandatory Access Control (MAC) on Linux that traditionally relies on Discretionary Access Control (DAC).

All loaded profiles can be listed along with their mode with the following command: $ aa-status apparmor module is loaded.

On systems hardened with AppArmor, Docker can enforce AppArmor profiles on containers.

Generate an AppArmor profile for a docker container with bane https://github.com/genuinetools/bane is a profile generator for docker containers.

DevOps Articles