> This is why containers on Linux will probably never have the security that Solaris or the BSDs have The dozens of changes which you refer to as containers ar

> This is why containers on Linux will probably never have the security that Solaris or the BSDs have The dozens of changes which you refer to as containers are very much bolted-on to both FreeBSD and Solaris. It would have been nice of that wasn't true, but it's just not realistic to to back to the drawing board netiher for FreeBSD nor Linux to get this single feature. Just think about cgroups, which required some rather deep reworking of several subsystems in Linux, took years to get in place. And that's just one of many pieces that containers can potentially make use of.