Book Image

OpenStack Cloud Security

By : Fabio Alessandro Locati
Book Image

OpenStack Cloud Security

By: Fabio Alessandro Locati

Overview of this book

Table of Contents (14 chapters)
OpenStack Cloud Security
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Linux Containers


Linux Containers (LXC) is a container management system that was integrated in the Linux Kernel 2.6.24 in August 2008. Like Docker, it uses many kernel modules, such as cgroups, SELinux, and AppArmor.

As for security, there have been real-world cases where users were able to escape from LXC limits, with Linux Kernels older than 3.8 and without proper patching. Since LXC 1.0, thanks to architectural redesigning and the use of unprivileged containers, no more container escape has been possible in properly configured environments.