Secure Linux Containers

Linux container technology allows a customer to carve a system out into isolated containers and run applications securely within the confines of the containers. It facilitates multi-tenancy, which allows IT organizations to take better advantage of the large servers available in their datacenters. While multitenancy provides flexibility for server resource management, especially for service providers, it introduces additional complexity, especially related to the security of applications and data that reside on the same server. Daniel will discuss resource management, namespacing, and the use of SELinux to tighten the security of Linux containers.

Dan Walsh, aka "Mr. SELinux," has been leading the SELinux effort at Red Hat for over 10 Years. Dan works on SELinux Userspace and Policy for Fedora and RHEL. He has also developed Secure Virtualization and helps to provide the security on OpenShift.