Re:Evolving Container Security with Linux User Namespaces
by LinuxBender on Wednesday December 23, 2020 @03:45PM
(#25522005)
Are your hosts SELinux enforced? It was not clear to me what methods were used to implement MAC. The focus of the article seemed to be around capabilities.
[ Parent
| on HN ]