Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security-Feature-Request: OWASP docker hardening rule #4 #6300

Open
stultitiophobia opened this issue Feb 10, 2025 · 2 comments
Open

Security-Feature-Request: OWASP docker hardening rule #4 #6300

stultitiophobia opened this issue Feb 10, 2025 · 2 comments

Comments

@stultitiophobia
Copy link

Summary

Can you implement OWASP docker rule #4 in the docker-compose.yml ?
Each single container should have:

    security_opt:
      - no-new-privileges:true

implemented.

Motivation

It will increase the system security.

Additional context

No response

@DerLinkman
Copy link
Member

If it does not break the systems connectivity inside containers and with the host system, we can think about that.

@stultitiophobia
Copy link
Author

I use this in the override file for every single container and it works without errors far ...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants