Workload misconfigurations
Recommended Mitigation
If SELinux is applicable for your Linux OS, you should use it. 1. Set the SELinux State. 2. Set the SELinux Policy. 3. Create or import a SELinux policy template for Docker containers. 4. Start Docker in daemon mode with SELinux enabled. For example: docker daemon --selinux-enabled. or by adding the following to the daemon.json configuration file: selinux-enabled: true. 5. Start your Docker container using the security options. For example: docker run --interactive --tty --security-opt label=level:TopSecret centos /bin/bash
