https://www.padok.fr/ https://www.padok.fr/en/blog https://www.padok.fr/en/blog/tag/security https://www.padok.fr/en/blog/security-docker-apparmor It implements Mandatory Access Control (MAC) on Linux that traditionally relies on Discretionary Access Control (DAC).

All loaded profiles can be listed along with their mode with the following command: $ aa-status apparmor module is loaded.

On systems hardened with AppArmor, Docker can enforce AppArmor profiles on containers.

Generate an AppArmor profile for a docker container with bane https://github.com/genuinetools/bane is a profile generator for docker containers.

Related Articles