3 ms·
> a random docker is almost as bad as a random executable You can sandbox a random executable with seccomp, you cannot effectively sandbox a whole container wi
by debiandev 7y ago
> a random docker is almost as bad as a random executable
You can sandbox a random executable with seccomp, you cannot effectively sandbox a whole container without breaking many things.
- raesene9 7y agoyou know that Docker (by default) includes a seccomp filter as one of it's layers of isolation, right?