I'm still a fan of poly instantiated /tmp and PrivateTmp (systemd). This may confuse/annoy admins who are not aware of namespaces, but I know that it definitel

I'm still a fan of poly instantiated /tmp and PrivateTmp (systemd). This may confuse/annoy admins who are not aware of namespaces, but I know that it definitely closes the attack vector of /tmp abuse by bad actors. https://www.redhat.com/en/blog/polyinstantiating-tmp-and-vartmp-directories https://www.redhat.com/en/blog/polyinstantiating-tmp-and-var...