3 ms·
Why would a containerized system not need it? Defense in depth would be a good thing.
by protomyth 10y ago
Why would a containerized system not need it? Defense in depth would be a good thing.
- bandrami 10y agoBecause Docker isn't running as root to begin with; it just convinces the containerized process that it is.
- djmdjm 10y agoYou've just demonstrated that you don't understand either the goals or mechanism of privilege separation: 1) it doesn't require root and 2) it protects more than the root account.
- mrsteveman1 10y agoAren't those the "unprivileged containers" that keep showing up as having huge security vulnerabilities?