This commit is contained in:
Am 2023-07-15 19:08:32 +02:00
Родитель 1bcbb14346
Коммит e5eb808456
1 изменённых файлов: 26 добавлений и 25 удалений

Просмотреть файл

@ -264,31 +264,32 @@ In this step we'll show how a custom AppArmor profile could have protected Docke
```
$ cat docker-compose.yml
wordpress:
image: endophage/wordpress:lean
links:
- mysql
ports:
- "8080:80"
environment:
- DB_PASSWORD=2671d40f658f595f49cd585db8e522cc955d916ee92b67002adcf8127196e6b2
cpuset: "0"
cap_drop:
- ALL
cap_add:
- SETUID
- SETGID
- DAC_OVERRIDE
- NET_BIND_SERVICE
# **YOUR WORK HERE**
# Add an apparmor profile to this image
mysql:
image: mariadb:10.1.10
environment:
- MYSQL_DATABASE=wordpress
- MYSQL_ROOT_PASSWORD=2671d40f658f595f49cd585db8e522cc955d916ee92b67002adcf8127196e6b2
ports:
- "3306"
services:
wordpress:
image: endophage/wordpress:lean
links:
- mysql
ports:
- "8080:80"
environment:
- DB_PASSWORD=2671d40f658f595f49cd585db8e522cc955d916ee92b67002adcf8127196e6b2
cpuset: "0"
cap_drop:
- ALL
cap_add:
- SETUID
- SETGID
- DAC_OVERRIDE
- NET_BIND_SERVICE
# **YOUR WORK HERE**
# Add an apparmor profile to this image
mysql:
image: mariadb:10.1.10
environment:
- MYSQL_DATABASE=wordpress
- MYSQL_ROOT_PASSWORD=2671d40f658f595f49cd585db8e522cc955d916ee92b67002adcf8127196e6b2
ports:
- "3306"
```
You can see that the file is describing a WordPress application with two services: