> but containers aim to provide many of the same benefits that SELinux does Absolutely not. They are not designed as security tools in the first place. Especia

> but containers aim to provide many of the same benefits that SELinux does Absolutely not. They are not designed as security tools in the first place. Especially docker, with its huge attack surface. You are confusing containers with sandboxes. Furthermore they don't implement anything resembling RBAC.