---
title: "Discussion on \"From Capabilities to AppArmor: Layering Linux Runtime Security\" | Hashnode"
description: "Discussion on \"From Capabilities to AppArmor: Layering Linux Runtime Security\". Capabilities, seccomp, and AppArmor working together to shut down the bad stuff"
url: "https://hashnode.com/posts/from-capabilities-to-apparmor-layering-linux-runtime-security/69efa8bb330a1ad7f7120809"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [From Capabilities to AppArmor: Layering Linux Runtime Security](https://cloudsecburrito.com/from-capabilities-to-apparmor-layering-linux-runtime-security?utm_source=hashnode&utm_medium=feed)

Capabilities, seccomp, and AppArmor working together to shut down the bad stuff

Apr 27 · 10 min read · cloudsecburrito.com  
Read the article

-   [#kubernetes](https://hashnode.com/tag/kubernetes)
-   [#linux](https://hashnode.com/tag/linux)
-   [#security](https://hashnode.com/tag/security)
-   [#apparmor](https://hashnode.com/tag/apparmor)
-   [#capabilities](https://hashnode.com/tag/capabilities)
-   [#seccomp](https://hashnode.com/tag/seccomp)
-   [#containers](https://hashnode.com/tag/containers)

## Written by

[Matt Brown](https://hashnode.com/@mattbrownsec)

@mattbrownsec · San Francisco

  
[View profile](https://hashnode.com/@mattbrownsec)

From policy to runtime: open source security in the real world.

Working as a solutions architect while going deep on Kubernetes security — prevention-first thinking, open source tooling, and a daily rabbit hole of hands-on learning. I make the mistakes, then figure out how to fix them (eventually).

## Responses

Markdown supported · ⌘↵ to post

No responses yet.