Answer
Security profiles restrict syscalls, capabilities, and filesystem access.
Quick Answer
AppArmor and SELinux are Mandatory Access Control (MAC) systems. Docker applies a default AppArmor profile (docker-default) to containers, restricting what system calls and filesystem paths they can access. SELinux applies type labels. Both add a security layer beyond namespaces — containers can't escape restrictions even as root.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ