Digest: sha256:5638b6581830be13c9ae418c5d1587f36c7f99b3860326fa7b163bef70236438
Нина Ташевская (Редактор отдела «Среда обитания»)
，详情可参考safew官方版本下载
Cgroups are important for stability, but they are not a security boundary. They prevent denial-of-service, not escape. A process constrained by cgroups still makes syscalls to the same kernel with the same attack surface.
Что думаешь? Оцени!