|
|
|
|
|
|
by staticassertion
33 days ago
|
|
|
io-uring is in a different league imo. I'd say that it's second only to user namespaces in terms of attack surface. That said, putting stuff in a docker container is kinda a light lift that cuts a bunch of attack surface. |
|
|