Skip to content

Instantly share code, notes, and snippets.

@pigfrown
Created June 26, 2017 14:45
Show Gist options
  • Save pigfrown/5b80efa127adf63fb40f8ae2b1ad2bda to your computer and use it in GitHub Desktop.
Save pigfrown/5b80efa127adf63fb40f8ae2b1ad2bda to your computer and use it in GitHub Desktop.
Notes on NCC Paper on LXC
privelege seperation, principle of least access, isolated root capabilities, resource limitations
openssh UsePrivelegeSeperation
Use linux-hardened and following the arch linux Kernel Hardening Page
Make sure you are using cgroups correctly with LXC (patched kernel still required?)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment