3 ms·
Or just take a Docker-like approach, where each app thinks it is the only user and intra-app communication is where you put the security functionality
by core-questions 7y ago
Or just take a Docker-like approach, where each app thinks it is the only user and intra-app communication is where you put the security functionality
- asveikau 7y agoBut the predecessor to containers were features like having daemons chroot into somewhere else and drop their uid to something that can't do much. That very much grew out of the Unix solutions. If Unix daemons were written for decades assuming all processes have equal privilege maybe we wouldn't see that.