1,742
1,740
1,7371,7371,7361,7361,736495495
435431314314
1882d ago · 10 min read · Over the past year I have written ad nauseum about Linux security primitives. And of course quite a bit of time has been dedicated to how these connect into Kubernetes. Some of the cooler aspects incl
Join discussion
Feb 16 · 7 min read · In Part 1, we stayed close to the kernel. We watched a process call uname(), attach a seccomp filter, and then get shut down at the syscall boundary. No permissions debate. No LSM policy. No capability check. The kernel simply said: that syscall does...
Join discussion
Feb 13 · 8 min read · Container Security Hardening Guide with Seccomp and AppArmor Introduction: The Growing Container Security Challenge Container adoption has exploded across enterprises, with organizations running thousands of containerized workloads in production. How...
Join discussionFeb 5 · 10 min read · Introduction We’ve already covered two Linux security mechanisms that show up in Kubernetes securityContext: LSMs (mainly AppArmor) Capabilities. Both matter. Both do real work. But there’s a third piece that’s just as important: seccomp. If capa...
Join discussion
Mar 20, 2023 · 9 min read · Linux is an open-source operating system widely used in servers, supercomputers, and embedded systems. As with any operating system, security is a crucial aspect of Linux to protect against unauthorized access, data theft, and other security breaches...
Join discussion