Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on SELinux is unmanageable; just turn it off if it gets in your way. Parent comment
Absolutely not. They are not designed as security tools in the first place. Especially docker, with its huge attack surface.
You are confusing containers with sandboxes.
Furthermore they don't implement anything resembling RBAC.
There are no comments on this comment yet.
Absolutely not. They are not designed as security tools in the first place. Especially docker, with its huge attack surface.
You are confusing containers with sandboxes.
Furthermore they don't implement anything resembling RBAC.