3 ms·
Not mentioned: use a kernel N-day, of which there are many. Patch your hosts folks
by arkadiyt 3y ago
Not mentioned: use a kernel N-day, of which there are many. Patch your hosts folks
- insanitybit 3y agoFor many, many services, requiring an entire separate exploit against the kernel is a huge win. So many services can just be dropped into a container with roughly 0 effort. If you want a higher level of security it's going to take significantly more effort.