4 ms·
Are you one of the developers/speaking for them? That warning is pretty old.
by lvh 8y ago
Are you one of the developers/speaking for them? That warning is pretty old.
- cyphar 8y agoCreation of user namespaces still has caused security vulnerabilities in very recent history. But with seccomp you can disable it inside a container (which is what Docker and LXC do by default for instance), and it doesn't make sense to be worried about that as a container runtime because you are using it to increase the security of your sandbox.