3 ms·
That is pretty much what jails are in FreeBSD, especially thin jails.
by rootnod3 2y ago
That is pretty much what jails are in FreeBSD, especially thin jails.
- vacuity 2y agoOr capabilities. Additive security has been known for decades; Linux really dropped the ball here. Linux file descriptors (open file descriptions, whatever) are close to a genuine capability model, except there's plenty of leakage where you can get at the insecure base.