Here’s why podman is more secured than Docker — DevSecOps — Cloudnweb

Audit Logging

auditctl -w /etc/shadow
touch /etc/shadowausearch -f /etc/shadow -i -ts recent

Login UID in linux kernel

How it works in containers

The Reason

What could go wrong?

sudo podman run --privileged -v /:/host fedora touch /host/etc/shadowsudo ausearch -f /etc/shadow -i

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store