4 ms·
> what really needs to happen is a new layer between UIDs and PIDs, corresponding to applications or services like cgroups?
by pantalaimon 6y ago
> what really needs to happen is a new layer between UIDs and PIDs, corresponding to applications or services
like cgroups?
- wtallis 6y agoCgroups are more about resource allocation than access control, but they may still be of some use under the hood (as they are for eg. docker). They certainly aren't the abstraction the end-user needs in order to enforce separation between application sandboxes.