5 ms·

How so?

• k__ 8y ago
  On trusting trust
• gigatexal 8y ago
  How would you be able to root out these containers doing seemingly anything sitting in kernelspace?
  • cpuguy83 8y ago
    The code wouldn't be running in kernel space, just the setup/configuration of the environment, which really isn't any different than it is today, tbh. This seems to be more about attaching a kernel auditable id to a container.
    • metabagel 8y ago
      It sounds like what you are talking about is already existing functionality, not the proposed design.
      • simcop2387 8y ago
        The proposed design uses all the existing functionality and gives it a single object in the kernel to control it rather than a dozen different ones. It's not a fundamental change in design to how the containers themselves work.
        • gigatexal 8y ago
          Ahh, well I stand corrected.