3 ms·
>Attempting to build sandboxes outside that software doesn't work well in practice. I can't say I agree with this. If it were true, containers would not be so
by zxzax 5y ago
>Attempting to build sandboxes outside that software doesn't work well in practice.
I can't say I agree with this. If it were true, containers would not be so ubiquitous.
- zie 5y agoExcept container permissions in practice are non-existent. They have essentially all the permissions by default. There is a reason you have to run your containers as NON ROOT. It's because containers can leak root access(last I checked, though I doubt it's changed any).