Docker Community Forums

Share and learn in the Docker community.

How much of a security risk is using host networking?

How much of a security risk is using --net="host" if the container doesn’t need to have any open ports (doesn’t communicate with internet)?

What needs to be done in order to use --net="host" securely?

Asking because my container needs access to host /proc/net/dev.