How to Mitigate Privilege Escalation on a Docker Container | CGroup and Namespaces

Описание к видео How to Mitigate Privilege Escalation on a Docker Container | CGroup and Namespaces

In this video, I have implemented CGroup and Namespaces, which are needed to Mitigate Privilege Escalation on a Docker Container.

CGroup: This is a feature of the Linux Kernel, used to limit access to processes and Containers on Systems resources such as CPU, RAM, IOPs and Networks.

Namespaces: It is a feature of the Linux Kernel, used to isolate the container processes from the host machine processes.

Комментарии

Информация по комментариям в разработке