3 ms·
chroot, cgroup, and the systemd run facilities (systemd-nspawn for example).
by neilwilson 8y ago
chroot, cgroup, and the systemd run facilities (systemd-nspawn for example).
- cyphar 8y agopivot_root, not chroot. chroot is vulnerable to many trivial escapes.