# \#security **URL:** https://forums.docker.com/tag/security/8.md [Latest](https://forums.docker.com/latest.md) · [Categories](https://forums.docker.com/categories.md) · [Tags](https://forums.docker.com/tags.md) --- ## [Does it make sense to filter system calls if I have blocked almost all capabilities](https://forums.docker.com/t/does-it-make-sense-to-filter-system-calls-if-i-have-blocked-almost-all-capabilities/151776)
**Author:** [@hosavudo](https://forums.docker.com/u/hosavudo)\ **Replies:** 6\ **Last updated:** [June 1, 2026, 7:37pm UTC](https://forums.docker.com/t/does-it-make-sense-to-filter-system-calls-if-i-have-blocked-almost-all-capabilities/151776 "2026-06-01T19:37:22Z")
Hello. The task is to run only one program in the container - the Firefox browser. The emphasis is on safety. Does it make sense from a security point of view to filter system calls through seccomp if I have blocked a… --- ## [Questions about DockerHub security practices](https://forums.docker.com/t/questions-about-dockerhub-security-practices/45865)
**Author:** [@cynthialiu](https://forums.docker.com/u/cynthialiu)\ **Replies:** 1\ **Last updated:** [April 16, 2026, 9:55pm UTC](https://forums.docker.com/t/questions-about-dockerhub-security-practices/45865 "2026-04-16T21:55:06Z")
We’re working through some vendor assessments for compliance purposes. Do you have a public page where we could view information about the security practices at Docker? The product in question is Docker Hub, large, comm… --- ## [Obnoxious rate limits](https://forums.docker.com/t/obnoxious-rate-limits/150743)
**Author:** [@mcandre](https://forums.docker.com/u/mcandre)\ **Replies:** 4\ **Last updated:** [January 7, 2026, 11:00am UTC](https://forums.docker.com/t/obnoxious-rate-limits/150743 "2026-01-07T11:00:39Z")
The current pricing scheme encourages malware: Docker Scout is arbitrarily limited to merely one repository per user. Any FOSS contributors with more than one repository are forced to not scan most of their repositorie… --- ## [Is docker build secure](https://forums.docker.com/t/is-docker-build-secure/150212)
**Author:** [@jaqxues](https://forums.docker.com/u/jaqxues)\ **Replies:** 3\ **Last updated:** [October 21, 2025, 8:23pm UTC](https://forums.docker.com/t/is-docker-build-secure/150212 "2025-10-21T20:23:44Z")
We want to have a GitLab pipeline that allows all teams (even none-trusted ones) to run a “build” job. There is a few issues with that regarding security that we need confirmation on. Intuitively, the answer should all b… --- ## [Incoming connection from docker.backend](https://forums.docker.com/t/incoming-connection-from-docker-backend/149345)
**Author:** [@jsinghbh](https://forums.docker.com/u/jsinghbh)\ **Replies:** 1\ **Last updated:** [August 3, 2025, 2:40pm UTC](https://forums.docker.com/t/incoming-connection-from-docker-backend/149345 "2025-08-03T14:40:20Z")
Hi All, Im running docker on macos and have norton antivirus which flagged an incoming connection File path: /Applications/Docker.app/Contents/MacOS/com.docker.backend User: js (501) IP Address: 216.245.177.193 Dire… --- ## [Suspicious message on this board](https://forums.docker.com/t/suspicious-message-on-this-board/148689)
**Author:** [@cd55489](https://forums.docker.com/u/cd55489)\ **Replies:** 1\ **Last updated:** [July 3, 2025, 3:18pm UTC](https://forums.docker.com/t/suspicious-message-on-this-board/148689 "2025-07-03T15:18:26Z")
Hi, I’ve just created an account to report this thread: I’ve found the solution given by the author of this thread very suspicious and all the following comments also. The solution might be legit and maybe I’m wrong,… --- ## [Securing Docker CE implementation with "cheap" SSL from trusted source?](https://forums.docker.com/t/securing-docker-ce-implementation-with-cheap-ssl-from-trusted-source/58802)
**Author:** [@bbanelli](https://forums.docker.com/u/bbanelli)\ **Replies:** 4\ **Last updated:** [May 22, 2025, 5:27am UTC](https://forums.docker.com/t/securing-docker-ce-implementation-with-cheap-ssl-from-trusted-source/58802 "2025-05-22T05:27:25Z")
Greetings to all, I have implemented open source docker to my virtual machines. It all works fine, but I would like to finish the whole procedure following this link: Since I managed to do it with self signed certifi… --- ## [Did Docker 28 change how named volumes are labeled with SELinux MCS? Cross-container socket sharing now broken](https://forums.docker.com/t/did-docker-28-change-how-named-volumes-are-labeled-with-selinux-mcs-cross-container-socket-sharing-now-broken/148032)
**Author:** [@pauwershell](https://forums.docker.com/u/pauwershell)\ **Replies:** 1\ **Last updated:** [May 8, 2025, 6:58am UTC](https://forums.docker.com/t/did-docker-28-change-how-named-volumes-are-labeled-with-selinux-mcs-cross-container-socket-sharing-now-broken/148032 "2025-05-08T06:58:31Z")
Hi all, I’m hoping someone can help clarify something I’ve run into after upgrading to Docker 28.x on a RHEL-based system with SELinux enforcing. What I’m seeing: On Docker 27.x, named volumes (used for things like M… --- ## [Docker compose secrets - file vs environment](https://forums.docker.com/t/docker-compose-secrets-file-vs-environment/147949)
**Author:** [@sridharrajagopal](https://forums.docker.com/u/sridharrajagopal)\ **Replies:** 3\ **Last updated:** [May 2, 2025, 7:08pm UTC](https://forums.docker.com/t/docker-compose-secrets-file-vs-environment/147949 "2025-05-02T19:08:57Z")
Hello, Fairly new to Docker, and I’m using docker compose to orchestrate services, both pre-built and custom - InfluxDB, Telegraf, Postgresql, NanoMQ, Backend and Frontend servers . I’m using Docker Secrets to manage t… --- ## [Automatically Docker Scout when provisioning layers](https://forums.docker.com/t/automatically-docker-scout-when-provisioning-layers/146662)
**Author:** [@mcandre](https://forums.docker.com/u/mcandre)\ **Replies:** 0\ **Last updated:** [February 15, 2025, 7:10pm UTC](https://forums.docker.com/t/automatically-docker-scout-when-provisioning-layers/146662 "2025-02-15T19:10:05Z")
NPM automatically runs the SCA tool npm audit when the user provisions packages with npm install. The Docker ecosystem stands to substantially improve the security posture by automatically presenting Docker Scout reports… --- ## [Docker Hub should auto Docker Scout and email maintainers](https://forums.docker.com/t/docker-hub-should-auto-docker-scout-and-email-maintainers/146632)
**Author:** [@mcandre](https://forums.docker.com/u/mcandre)\ **Replies:** 1\ **Last updated:** [February 15, 2025, 8:28am UTC](https://forums.docker.com/t/docker-hub-should-auto-docker-scout-and-email-maintainers/146632 "2025-02-15T08:28:41Z")
On GitHub, CodeQL and Dependabot can automatically notify maintainers when a project has CVE’s. Docker Hub could substantially improve the ecosystem by implementing similar email notifications, based on Docker Scout. --- ## [Communicate with DBus from an unprivileged container](https://forums.docker.com/t/communicate-with-dbus-from-an-unprivileged-container/101549)
**Author:** [@marandil](https://forums.docker.com/u/marandil)\ **Replies:** 2\ **Last updated:** [February 13, 2025, 12:56pm UTC](https://forums.docker.com/t/communicate-with-dbus-from-an-unprivileged-container/101549 "2025-02-13T12:56:29Z")
TL;DR: Is it possible, or at least planned, to communicate with host DBus from an unprivileged container. I need to communiate with host DBus/systemd from inside a container to react to several external requests. As a s… --- ## [Running docker image with low privileged user is mixing up permission on host system](https://forums.docker.com/t/running-docker-image-with-low-privileged-user-is-mixing-up-permission-on-host-system/146576)
**Author:** [@bishvandana](https://forums.docker.com/u/bishvandana)\ **Replies:** 2\ **Last updated:** [February 12, 2025, 7:14am UTC](https://forums.docker.com/t/running-docker-image-with-low-privileged-user-is-mixing-up-permission-on-host-system/146576 "2025-02-12T07:14:56Z")
I am using a custom postgres image with low privileged user created with id 999. Part of Postgres Dockerfile: RUN groupadd -r postgres --gid=999; \\ useradd -r -g postgres --uid=999 --home-dir=/var/lib/postgresql --she… --- ## [How to Restrict docker exec and docker cp Commands for Python-Based Containers](https://forums.docker.com/t/how-to-restrict-docker-exec-and-docker-cp-commands-for-python-based-containers/145966)
**Author:** [@pallimeni](https://forums.docker.com/u/pallimeni)\ **Replies:** 3\ **Last updated:** [January 8, 2025, 11:23am UTC](https://forums.docker.com/t/how-to-restrict-docker-exec-and-docker-cp-commands-for-python-based-containers/145966 "2025-01-08T11:23:39Z")
I am running Python-based applications inside Docker containers. For security reasons, I need to restrict the use of the following commands on these containers: docker exec: Prevent users from executing commands inside … --- ## [Understanding security implications of secrets vs. env vars in Docker Compose](https://forums.docker.com/t/understanding-security-implications-of-secrets-vs-env-vars-in-docker-compose/145903)
**Author:** [@mu88](https://forums.docker.com/u/mu88)\ **Replies:** 4\ **Last updated:** [January 7, 2025, 8:27pm UTC](https://forums.docker.com/t/understanding-security-implications-of-secrets-vs-env-vars-in-docker-compose/145903 "2025-01-07T20:27:53Z")
Hi :wave:t2: I have a question of understanding about the difference between using secrets instead of environment variables in Docker Compose. In the official docs, I find the following statement: Docker Compose provi… --- ## [Installing app armour on alpine linux](https://forums.docker.com/t/installing-app-armour-on-alpine-linux/144527)
**Author:** [@sarthak110692](https://forums.docker.com/u/sarthak110692)\ **Replies:** 0\ **Last updated:** [October 22, 2024, 6:14am UTC](https://forums.docker.com/t/installing-app-armour-on-alpine-linux/144527 "2024-10-22T06:14:13Z")
Hi, I am trying to install app apparmor apparmor-utils on a container running on ubuntu machine with alpine. On my host system apparmor is working fine and when checking apparmor status i can see profiles are loaded ap… --- ## [UGREEN NAS w/ 2 LAN Ports](https://forums.docker.com/t/ugreen-nas-w-2-lan-ports/143553)
**Author:** [@thehwdavis](https://forums.docker.com/u/thehwdavis)\ **Replies:** 2\ **Last updated:** [September 3, 2024, 5:05pm UTC](https://forums.docker.com/t/ugreen-nas-w-2-lan-ports/143553 "2024-09-03T17:05:49Z")
Hello all, Docker novice here. I’ve got a UGREEN NAS with 2 LAN connections, one to my main router, and one to my secondary router (which is then also connected via WAN to my main router). The second router also has T… --- ## [Compose, passwords and security](https://forums.docker.com/t/compose-passwords-and-security/137419)
**Author:** [@patafoin49](https://forums.docker.com/u/patafoin49)\ **Replies:** 7\ **Last updated:** [August 25, 2024, 10:04pm UTC](https://forums.docker.com/t/compose-passwords-and-security/137419 "2024-08-25T22:04:29Z")
Hi, It’s been some days I’m looking for a clear answer but can’t find it. I want to create my compose files without storing passwords and api tokens in them. I’m not running in swarm mode and don’t wan’t to. Looking … --- ## [Is it possible to disable nat in docker-compose?](https://forums.docker.com/t/is-it-possible-to-disable-nat-in-docker-compose/48536)
**Author:** [@bdbear](https://forums.docker.com/u/bdbear)\ **Replies:** 3\ **Last updated:** [August 14, 2024, 2:04pm UTC](https://forums.docker.com/t/is-it-possible-to-disable-nat-in-docker-compose/48536 "2024-08-14T14:04:25Z")
How can I implement enable\_ip\_masquerade=false Into networks: front: driver: bridge ipam: driver: default config: - subnet: 172.25.0.0/24 --- ## [Is docker running on 0.0.0.0 posing a threat?](https://forums.docker.com/t/is-docker-running-on-0-0-0-0-posing-a-threat/143085)
**Author:** [@luggie91](https://forums.docker.com/u/luggie91)\ **Replies:** 0\ **Last updated:** [August 13, 2024, 7:12am UTC](https://forums.docker.com/t/is-docker-running-on-0-0-0-0-posing-a-threat/143085 "2024-08-13T07:12:39Z")
Hi, (1) I just hear about this serious old vulnerability and was wondering if all my docker container, that are running on 0.0.0.0 would pose a threat to the system they are running on. (2) I further read that all majo… --- ## [Set password for container when use docker exec](https://forums.docker.com/t/set-password-for-container-when-use-docker-exec/142334)
**Author:** [@hieunv0871](https://forums.docker.com/u/hieunv0871)\ **Replies:** 5\ **Last updated:** [July 8, 2024, 5:45am UTC](https://forums.docker.com/t/set-password-for-container-when-use-docker-exec/142334 "2024-07-08T05:45:13Z")
FROM nginx ARG EXEC\_PASSWORD RUN apt-get update && apt-get install -y passwd \\ && useradd -ms /bin/bash testuser \\ && echo "testuser:${EXEC\_PASSWORD}" | chpasswd USER testuser COPY html /usr/share/nginx/html i… --- ## [Understanding swarm secrets and rootless mode](https://forums.docker.com/t/understanding-swarm-secrets-and-rootless-mode/142195)
**Author:** [@germaggus](https://forums.docker.com/u/germaggus)\ **Replies:** 9\ **Last updated:** [July 6, 2024, 10:51am UTC](https://forums.docker.com/t/understanding-swarm-secrets-and-rootless-mode/142195 "2024-07-06T10:51:54Z")
Hello everyone, I am new to this forum and to the whole topic of Docker and everything related to it. I am trying to learn, understand, and implement the whole topic. Over the last few days, I have read and tried a lot,… --- ## [Private keys for crypto wallet in Docker image](https://forums.docker.com/t/private-keys-for-crypto-wallet-in-docker-image/141424)
**Author:** [@john6463524524](https://forums.docker.com/u/john6463524524)\ **Replies:** 0\ **Last updated:** [May 14, 2024, 3:13pm UTC](https://forums.docker.com/t/private-keys-for-crypto-wallet-in-docker-image/141424 "2024-05-14T15:13:20Z")
I have a Windows game client (.exe) that contacts a Linux server which holds the private keys for the developer’s crypto wallet and runs an app that distributes crypto currency and NFTs to the user’s wallets when the app… --- ## [Container Security & Encryption](https://forums.docker.com/t/container-security-encryption/137699)
**Author:** [@nealfarmer1](https://forums.docker.com/u/nealfarmer1)\ **Replies:** 9\ **Last updated:** [April 18, 2024, 12:56pm UTC](https://forums.docker.com/t/container-security-encryption/137699 "2024-04-18T12:56:30Z")
Hello everyone! Is there a way to encrypt your container to protect the information in it? We have some proprietary algorithms that we want to protect but also want to give the functionality (in the form of a container) … --- ## [Default capabilities in 2023/4 - do they reasonably prevent the container root escape / break out?](https://forums.docker.com/t/default-capabilities-in-2023-4-do-they-reasonably-prevent-the-container-root-escape-break-out/139026)
**Author:** [@petrincontainer](https://forums.docker.com/u/petrincontainer)\ **Replies:** 2\ **Last updated:** [January 10, 2024, 4:12pm UTC](https://forums.docker.com/t/default-capabilities-in-2023-4-do-they-reasonably-prevent-the-container-root-escape-break-out/139026 "2024-01-10T16:12:04Z")
Hi Docker Community, So far I have understood the containers are also helping with deployments security a lot. Now, there is a camp that challenges it, namely that the default user, the container root, is deemed to hav… --- ## [Solution required for nginx: \[emerg\] bind() to 0.0.0.0:443 failed (13: Permission denied) encountered during docker run](https://forums.docker.com/t/solution-required-for-nginx-emerg-bind-to-0-0-0-0-443-failed-13-permission-denied-encountered-during-docker-run/138897)
**Author:** [@ramyashree8910](https://forums.docker.com/u/ramyashree8910)\ **Replies:** 1\ **Last updated:** [December 12, 2023, 6:02pm UTC](https://forums.docker.com/t/solution-required-for-nginx-emerg-bind-to-0-0-0-0-443-failed-13-permission-denied-encountered-during-docker-run/138897 "2023-12-12T18:02:15Z")
Hi, I am currently exploring the usage of the Nginx Docker image within our project. I have to run the container as non-root user binding to the ports 80/443 in secure way. Am facing permission denied issue due to non-r… --- ## [Solution Required for nginx: \[emerg\] bind() to 0.0.0.0:443 failed (13: Permission denied)](https://forums.docker.com/t/solution-required-for-nginx-emerg-bind-to-0-0-0-0-443-failed-13-permission-denied/138875)
**Author:** [@ramyashree8910](https://forums.docker.com/u/ramyashree8910)\ **Replies:** 1\ **Last updated:** [December 11, 2023, 6:47am UTC](https://forums.docker.com/t/solution-required-for-nginx-emerg-bind-to-0-0-0-0-443-failed-13-permission-denied/138875 "2023-12-11T06:47:14Z")
Hi, I am currently exploring the usage of the Nginx Docker image within our project. I have to run the container as non-root user binding to the ports 80/443 in secure way. Am facing permission denied issue due to non-r… --- ## [Improving Docker Swarm security with separate users?](https://forums.docker.com/t/improving-docker-swarm-security-with-separate-users/138805)
**Author:** [@bluepuma77](https://forums.docker.com/u/bluepuma77)\ **Replies:** 7\ **Last updated:** [December 6, 2023, 8:27pm UTC](https://forums.docker.com/t/improving-docker-swarm-security-with-separate-users/138805 "2023-12-06T20:27:42Z")
From a security perspective, Docker Swarm seems like a nightmare, the deeper I look into it. Docker Swarm needs to be run with root, most containers use root user by default. How can I improve the security by using sepa… --- ## [Inquiry regarding Security considerations for Nginx Docker image](https://forums.docker.com/t/inquiry-regarding-security-considerations-for-nginx-docker-image/138760)
**Author:** [@ramyashree8910](https://forums.docker.com/u/ramyashree8910)\ **Replies:** 0\ **Last updated:** [December 4, 2023, 6:34am UTC](https://forums.docker.com/t/inquiry-regarding-security-considerations-for-nginx-docker-image/138760 "2023-12-04T06:34:54Z")
Hi, I am currently exploring the usage of the Nginx Docker image within our project. I am reaching out to seek more information about the security considerations and best practices associated with using your Docker ima… --- ## [Creating Non Root user in Dockerfile and give Sudo Access With Password and without password](https://forums.docker.com/t/creating-non-root-user-in-dockerfile-and-give-sudo-access-with-password-and-without-password/138131)
**Author:** [@bilalaslam0313](https://forums.docker.com/u/bilalaslam0313)\ **Replies:** 0\ **Last updated:** [October 18, 2023, 5:20pm UTC](https://forums.docker.com/t/creating-non-root-user-in-dockerfile-and-give-sudo-access-with-password-and-without-password/138131 "2023-10-18T17:20:35Z")
if I create a non-root user in Dockerfile and add this user to the sudoers file, what is its impact on the host system, and is this user equal to the root user, and If a create non root user and set password for this u… [Next page](https://forums.docker.com/tag/security/8.md?match_all_tags=true&page=1&tags%5B%5D=security)