SELinux would have prevented a number of container breakout issues. That said, as someone one time worked on an SELinux issue in Docker and then became the def

SELinux would have prevented a number of container breakout issues. That said, as someone one time worked on an SELinux issue in Docker and then became the defacto "expert"... it's a terrible mess, often coming with incompatible policy changes tied to kernel changes and policies which are stacked on top of each other like a house of cards that are difficult to tease apart for other distros.