4 ms·
Yes it is fuzzy, the point being is that most people assume sandboxes are some form of default deny. With containers, there is a responsibility for both the in
by nyrikki 3y ago
Yes it is fuzzy, the point being is that most people assume sandboxes are some form of default deny.
With containers, there is a responsibility for both the instantiation and the container image to ensure that isolation happens.
That is why I hesitate to consider them equal as the responsibilities are different.