Linux Capabilities and Seccomp Profiles: The Developer’s Guide to Docker Security Hardening
Linux capabilities and seccomp profiles are two of the most effective container security controls available — and two of the least consistently implemented. The barrier is not knowledge of what these controls do; most security-aware…