diff --git a/README.md b/README.md index 8691b4e..c232b43 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,7 @@ * [Sandboxes](#sandboxes) * [Partial Access](#partial-access) * [Security](#security) + - [Tools](#tools) - [Links](#links) - [Levels of security problems](#levels-of-security-problems) - [Technologies for security](#technologies-for-security) @@ -93,13 +94,21 @@ Works with Linux namespaces through glibc with pure python. ## Security +### Tools + +* [Docker bench security](https://github.com/docker/docker-bench-security) +The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. + ### Links +* [CIS Security Benchmarks](https://benchmarks.cisecurity.org/about/) * [Are Docker containers really secure?](https://opensource.com/business/14/7/docker-security-selinux) * [Bringing new security features to Docker](https://opensource.com/business/14/9/security-for-docker) * [Docker, Linux Containers (LXC), and security](http://www.slideshare.net/jpetazzo/docker-linux-containers-lxc-and-security) * [For containers, security is problem #1](http://www.itworld.com/article/2920349/security/for-containers-security-is-problem-1.html) * [Linux Container Security](https://mjg59.dreamwidth.org/33170.html) * [Ask HN: Best Linux sandbox?](https://news.ycombinator.com/item?id=10030868) +* [CIS Docker 1.6 Benchmark v1.0.0](https://benchmarks.cisecurity.org/tools2/docker/CIS_Docker_1.6_Benchmark_v1.0.0.pdf) +* [Understanding docker security and best practices](https://blog.docker.com/2015/05/understanding-docker-security-and-best-practices/) ### Levels of security problems