Questions tagged [security]

For questions related to IT Security, Information Security or DevSecOps.

8 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2
votes
0answers
82 views

What security loopholes does Istio tackle?

My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
2
votes
1answer
40 views

How to avoid an avalanche of images in Openshift when security patches keep coming in?

Our applications are based on tomcat, strictly speaking on tomcat base s2i image provided by RedHat. This is updated quite frequently, and we need to comply to some regulations and apply the updates. ...
1
vote
0answers
15 views

Is it possible to share Kerbeos ticket from host system with Docker container

I'm trying to make a PoC. Host OS gets Kerberos ticket. There is a Docker container running on host OS. Docker container needs to get/hijack this ticket somehow it order to call some external services ...
1
vote
0answers
47 views

How to get alert for LDAP issues

I want to run some script which checks for LDAP issue, and in case it found something, it sent me alert. I thought using ssh command with some generic user, but I'm not sure what is the response I'm ...
0
votes
0answers
7 views

why is a PHP client trying to do unauthorized REST.POST.OBJECT to my S3 bucket?

I've written a logfile analysis program for my S3 logs and I'm now looking in detail at every line. I've seen some odd behavior lately. I'm trying to figure out ...
0
votes
1answer
49 views

Docker: Let containers communicate to each other but don't expose to internet

I was recently shocked to find out that docker writes its own iptables rules and ignores ufw bindings completely. I had blocked all ports using the ufw deny incoming command and then selectively ...
0
votes
0answers
9 views

SSO integration with DOMO from Java application

I have two application 1. Internal application 2. DOMO application (BI tool) we are planning to implement SSO. The credentials we are using for our internal application it should work for DOMO as well....
0
votes
0answers
7 views

Sharing {local/staging/prod} {front/back}end .env-s between multiple devs

What is a good solution for sharing {local/staging/prod} {front/back}end .envs between multiple devs? Both front and back end need environment vars for {local/staging/prod} Some developers only need ...