You gain a shell inside a customer-facing Docker container during a penetration test. When you run the command "ps aux" you only see a few processes instead of the entire host process list, making it harder to discover additional targets. Which Linux kernel feature used by containers most directly enforces this process-level isolation?
Docker relies on several Linux kernel features to isolate containers from the host. Process visibility is controlled by the PID namespace. Each container receives its own PID namespace, so processes inside the container only see and interact with other processes in that same namespace. Control groups (cgroups) primarily limit resource usage such as CPU and memory, not process listing. SECCOMP filtering restricts the system calls that processes may invoke but does not hide host processes. OverlayFS (union filesystems) provides a layered filesystem to reduce image size and support copy-on-write but also does not restrict process visibility. Therefore, the inability to see host-level processes is due to PID namespace isolation.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a PID namespace in Linux?
Open an interactive chat with Bash
How do control groups (cgroups) differ from PID namespaces?
Open an interactive chat with Bash
Why doesn't SECCOMP filtering enforce process isolation?
Open an interactive chat with Bash
How does PID namespace isolation work in containers?
Open an interactive chat with Bash
What are control groups (cgroups) and how do they differ from PID namespaces?
Open an interactive chat with Bash
Why is SECCOMP system-call filtering used in Docker containers?
Open an interactive chat with Bash
Certified Ethical Hacker (CEH)
Cloud Computing
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .