[paulddraper]

> considering on most systems anything under a uid can debug something else under a uid

Right? Couldn't only security hardened distros like SELinux take advantage of this?

Or I suppose Docker GUI apps?

[michaelmrose]

Docker isn't a security layer

[paulddraper]

Security isn't the only thing Docker offers, but yes Docker on Linux is a security layer.