"This was the worst mistake of my life."
"objectiveId": "205789981380186112",
，推荐阅读爱思助手下载最新版本获取更多信息
Follow topics & set alerts with myFT
Cgroups are important for stability, but they are not a security boundary. They prevent denial-of-service, not escape. A process constrained by cgroups still makes syscalls to the same kernel with the same attack surface.