slackbuilds_ponce/system/bubblewrap/README
Vincent Batts 09274966f0
system/bubblewrap: Added (unprivileged sandboxing tool).
Signed-off-by: David Spencer <idlemoor@slackbuilds.org>
2017-01-21 07:04:33 +07:00

8 lines
350 B
Text

Bubblewrap
Many container runtime tools like systemd-nspawn, docker, etc. focus on
providing infrastructure for system administrators and orchestration tools
(e.g. Kubernetes) to run containers.
These tools are not suitable to give to unprivileged users, because it is
trivial to turn such access into to a fully privileged root shell on the host.