Could anyone comment on the Linux kernel's limitations that makes containers insecure as compared to BSD jails or Solaris/IllumOS zones? Is there anything on L

Could anyone comment on the Linux kernel's limitations that makes containers insecure as compared to BSD jails or Solaris/IllumOS zones? Is there anything on Linux roadmap that will change this?