Cgroups are important for stability, but they are not a security boundary. They prevent denial-of-service, not escape. A process constrained by cgroups still makes syscalls to the same kernel with the same attack surface.
Жители Санкт-Петербурга устроили «крысогон»17:52
。im钱包官方下载对此有专业解读
Жители Санкт-Петербурга устроили «крысогон»17:52
Continue reading...