4 ms·
With no segregation, you crack one service you get access to all 25 services and their data. With segregation, you crack one service you get access to just tha
by Narkov 6y ago
With no segregation, you crack one service you get access to all 25 services and their data.
With segregation, you crack one service you get access to just that container/physical service.
- kortilla 6y agoLinux has had support for multiple users for quite some time now. Popping a standard service process doesn’t get you any more than the privileges of the running user, which is usually scoped to that service alone. Install Ubuntu, Postgres+apache2, then su to www-data and try read some data from the postgres data directory to see what I mean.