3 Security - Overview ' Copyright IBM Corp. 2 019. All rights reserved. 41 As mentioned in Chapter 1, zCX is a new capability that is shipped for the first time with z/OS  2.4. The zCX instance that runs on z/OS runs in a Linux operating system. Inside the zCX  instance, Docker containers run. Those containers run products and applications. In turn, this new paradigm naturally raises the question,  How do we manage security for zCX on z/OS? This chapter discusses the various aspects of security for zCX on z/OS, including these  topics: GLYPH<SM590000> 3.1, “zCX instance  security” on page 42 GLYPH<SM590000> 3.2, “Security within the zCX instance” on page 45 GLYPH<SM590000> 3.3, “Docker in zCX versus Docker on distributed” on page 47