Skip to content

Instantly share code, notes, and snippets.

@Saluki

Saluki/container-osquery_apparmor.sql

Created January 28, 2019 10:38
Show Gist options
  • Save Saluki/ce4db3bcf6d619a3f84eb7f53fa011b5 to your computer and use it in GitHub Desktop.
Save Saluki/ce4db3bcf6d619a3f84eb7f53fa011b5 to your computer and use it in GitHub Desktop.
Download ZIP
MEDIUM - Container OSQuery - AppArmor filtering
Raw
container-osquery_apparmor.sql
-- Detect profiles that are not running with AppArmor
SELECT name, image, state
FROM docker_containers
WHERE security_options NOT LIKE "%apparmor%";
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment