Haha, I bet the Docker team wishes they had a built-in 'runtime analysis capability' like in option B. That would be pretty neat, but I guess we're stuck with the good old Dockerfile for now.
D is also a good option. Ops teams often have a good understanding of the processes used in the containers they manage, making whitelisting more straightforward.
I agree with Wendell. Containers are great for whitelisting because you can easily define and control the processes that are allowed to run within them.
C seems like the best answer here. Containers are designed to be lightweight and focused, so they typically have a limited number of processes that should be running.
Marcos
1 months agoAlton
1 months agoLelia
17 days agoJovita
18 days agoMy
1 months agoTelma
1 months agoPrecious
2 months agoDick
2 months agoCrista
28 days agoElliott
1 months agoAlona
1 months agoOnita
2 months agoWendell
2 months agoCaitlin
1 months agoCorinne
1 months ago