Using a Different LSM from the Host in a Container
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Explore the challenges and solutions for using different Linux Security Modules (LSMs) in containers than those used by the host system in this 32-minute conference talk. Delve into the complexities of enabling AppArmor LSM within containers on hosts running SELinux or Smack. Learn about the pitfalls encountered and strategies developed while implementing this capability for snappy applications and LXD system containers. Examine topics such as LSM namespacing, multiple LSMs, kernel virtualization, and dynamic LSM stacking. Gain insights into container security, user namespaces, and the current limitations of running inverse configurations.