How much of a security risk is using --net="host" if the container doesn’t need to have any open ports (doesn’t communicate with internet)?
What needs to be done in order to use --net="host" securely?
Asking because my container needs access to host /proc/net/dev.