Comment on Show HN: Bocker – Docker implemented in 100 lines of bashparentComments−Spakman11yWhat do you mean that "The security story is unfinished though."?−XorNot11yIt's openly pointed out in the docs that it's intended to prevent unintentional system alterations, not stop an actively hostile program - i.e. there's not a lot of confidence from the devs in it's isolation levels yet.
Comments
What do you mean that "The security story is unfinished though."?
It's openly pointed out in the docs that it's intended to prevent unintentional system alterations, not stop an actively hostile program - i.e. there's not a lot of confidence from the devs in it's isolation levels yet.