News for hackers. Stuff that matters.
Re:We're migrating many of our servers from Linux to FreeBSD by goodpoint on Monday January 24, 2022 @06:10PM (#30065436)
> systemd-nspawn isn't a container. For example it doesn't manage resources such as CPU or IO.

False.

> And how is SELinux a good security module?

It's good enough for most environments requiring RBAC. Additionally, it's complemented by the excellent sandboxing ability of SystemD unit files.

There are no comments on this comment yet.