bane
Tool and Usage
Project details
- License
- MIT
- Programming language
- Golang
- Author
- Jessie Frazelle
- Latest release
- 0.4.4
- Latest release date
Project health
Links
 | Bane GitHub project |
Why this tool?
Bane is a tool to create AppArmor profiles. This helps to secure applications by setting restrictions on resources they access or modify. A strict policy may help to prevent privilege escalation attacks.
How it works
Bane works by running a Docker container while bane monitors it. Any required permissions will then be stored in the profile.
Usage and audience
bane is commonly used for application security, security monitoring, or system hardening. Target users for this tool are security professionals and system administrators.
Features
- Command line interface
- Docker support
Example usage and output
Usage: bane <command>
Flags:
-d enable debug logging (default: false)
-profile-dir directory for saving the profiles (default: /etc/apparmor.d/containers)
Commands:
version Show the version information.
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
Strengths
- + More than 500 GitHub stars
- + The source code of this software is available
Installation
Supported operating systems
Bane is known to work on FreeBSD, Linux, Microsoft Windows, Solaris, and macOS.
bane alternatives
Similar tools to bane:
Anchore Engine
Anchore is a toolkit to perform in-depth container analysis, inspection, and controlling them. Among security scanning, it can do a wide range of functions.
Dagda
Dagda is a security tool to perform static analysis of known vulnerabilities, malware and threats in Docker images and containers. It monitors both the Docker daemon and running containers to find anomalies and suspicious activities.
This tool page was updated at . Found an improvement? Help the community by submitting an update.
Related tool information
Categories
This tool is categorized as a Docker security tool, application privilege restriction tool, and container security tool.