[MESOS-4936] Improve container security for Mesos containerizer.

• Type: Epic
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Component/s: containerization
• Labels: mesosphere
• Epic Name: Container Security
• Assignee: Unassigned
• Reporter: Jie Yu
• Created: 14/Mar/16 17:14
• Updated: 27/Oct/17 22:41

Description

We should investigate the following to improve the container security for Mesos containerizer:

1) Capabilities
2) User namespace
3) Seccomp
4) SELinux
5) AppArmor

We should investigate what other container systems are doing regarding security:
1) k8s
2) docker
3) oci

Issue Links

• is related to: MESOS-2952 Provide user namespaces for privileged access inside containers
• relates to: MESOS-3277 Implement basic security isolators such as linux/apparmor or linux/seccomp
• relates to: MESOS-8142 Improve container security with user namespaces.
• mentioned in: Page Loading...