I want to attempt to increase the security of some Alpine Linux Docker containers which run Nginx and other servers.
I would like to disable commands like
sed, so that they are completely unavailable for users which manage to get access to a shell.
These commands should be available during Docker's build phase, it should be one last entry in the
Dockerfile which removes these commands.
Would removing symlinks to
/bin/busybox of the respective commands be enough? Could they somehow be recreated by a hacker?