LABINTERMEDIATE
Kernel Hardening Tools Lab
Master seccomp and AppArmor profiles to restrict container syscalls and enforce mandatory access controls.
45 minutes
kubernetes-security/cks

Lab Overview
This hands-on lab teaches you to implement kernel-level security controls for Kubernetes workloads for CKS exam preparation.
You'll learn to:
- Create and apply seccomp profiles to restrict syscalls
- Configure AppArmor profiles for mandatory access control
- Apply runtime security policies to pods
- Validate kernel hardening configurations
Kernel hardening tools provide an additional layer of defense by restricting what containers can do at the operating system level, limiting the impact of container escapes.
Prerequisites
cka-certification
linux-security-fundamentals
Technologies Covered
kubernetessecuritycksseccompapparmorkernel-security
Part of a Course
This lab is part of the Kubernetes Security Specialist - CKS Certification Preparation course
View All CoursesChoose your plan
Simple, Transparent Pricing
One price, everything included
Monthly Plan
Access all content
$99/month
Save 16%
Quarterly Plan
Save 16% with quarterly billing
$249/quarter
Everything Included in Your Subscription
Content & Learning
- Access to all courses and bootcamps
- Video lessons with closed captions
- Interactive quizzes and assessments
- Course completion certificates
Hands-On Labs
- Browser-based cloud labs
- Pre-configured VMs ready to use
- Playgrounds for experiments
- Multi-VM realistic scenarios
AWS Integration
- Managed AWS Account included
- Pre-configured environments
- Real-world cloud scenarios
Support & Community
- Priority support
- Active community forum
No Setup Required
- Everything runs in your browser
- No software installation needed
- Automatic environment provisioning
- Works on any device
Ready to Get Started?
Start this hands-on lab and build real-world Platform Engineering skills
Get Access Now