4 ms·
Exactly the main argument that was being made against enabling this by default all those years ago.
by boring_twenties 5y ago
Exactly the main argument that was being made against enabling this by default all those years ago.
- octoberfranklin 5y agoIndeed, this is exactly why containers are not a security feature. Counterintuitively, using containers makes your system less secure because you have to expose this huge kernel attack surface to non-root users.
- deleted 5y ago[deleted]