I know of so many cases where rather than learning it, people disable app armor or selinux. I was guilty of it for so many years! But security is important and both of these are a link in the chain :-)
@@Drewbernetes I actually never see someone use app armor, it's the exam bring me to this. Maybe cuz we use cloud manage cluster and it's not so important? I really have no idea.
@@po6577 Honestly I think it's because people duck around security more than anything. With the amount of high profile breaches we've seen in the recent past, you'd think more people would be on top of it and practicing security-by-design, but the reality is that it is an afterthought. Even in the managed services, this is possible. Amazon, for example, have documented how to implement it (or use a 3rd party approach) to achieve this.
thanks! possible to have a update video which use security context?
No problem :-) I do have a video on Security Contexts already over here -> ua-cam.com/video/JYVCdpYHUhg/v-deo.html
Is this what you were looking for?
What's the rush?
I rush everything unfortunately! I just have to get things done... and now :-D
I hate app armor so much
I know of so many cases where rather than learning it, people disable app armor or selinux. I was guilty of it for so many years! But security is important and both of these are a link in the chain :-)
@@Drewbernetes I actually never see someone use app armor, it's the exam bring me to this. Maybe cuz we use cloud manage cluster and it's not so important? I really have no idea.
@@po6577 Honestly I think it's because people duck around security more than anything. With the amount of high profile breaches we've seen in the recent past, you'd think more people would be on top of it and practicing security-by-design, but the reality is that it is an afterthought.
Even in the managed services, this is possible. Amazon, for example, have documented how to implement it (or use a 3rd party approach) to achieve this.