News for hackers. Stuff that matters.

A comment on Why would anyone choose Docker over fat binaries?. Parent comment

Re:Why would anyone choose Docker over fat binaries? by snuxoll on Sunday October 29, 2017 @09:53AM (#15579294)
> You may be able to guarantee this with a VM but you certainly cannot guarantee it with a container.

I can guarantee it pretty well on my RHEL and CentOS systems, SELinux prevents containers from accessing things they shouldn’t just like it prevents Apache from dumping /etc/passwd.

[ Parent | on HN ]
Re:Why would anyone choose Docker over fat binaries? by lightedman on Sunday October 29, 2017 @11:39AM (#15579681)
"I can guarantee it pretty well on my RHEL and CentOS systems"

Slashdot tried that with CentOS and failed miserably. I have my doubts regarding your guarantee.

[ Parent | on HN ]
Re:Why would anyone choose Docker over fat binaries? by Spivak on Sunday October 29, 2017 @02:37PM (#15580607)
Link? I want to see what they actually tried.
[ Parent | on HN ]