3 ms·
Not the best isolation however because containers aren't sandboxes (yet). If you're really serious you need to run something like https://firejail.wordpress.co
by imglorp 10y ago
Not the best isolation however because containers aren't sandboxes (yet). If you're really serious you need to run something like https://firejail.wordpress.com https://firejail.wordpress.com .
- nl 10y agoI think (hope?) people would realize that by now about Docker. But it is a non-trivial amount of protection against things like local file access.