2 ms·
It is a security measure. Sure it doesn't secure anything in the container itself. But it secures the container from other containers. Code can (as proven) not
by gammalost 3y ago
It is a security measure. Sure it doesn't secure anything in the container itself. But it secures the container from other containers. Code can (as proven) not be trusted, but the area of effect can be reduced.
- 65a 3y agoOnly with additional hardening between the container and the kernel and hardware itself.