What do you mean that "The security story is unfinished though."? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Spakman on July 22, 2015 \| parent \| context \| favorite \| on: Show HN: Bocker – Docker implemented in 100 lines ... What do you mean that "The security story is unfinished though."?

XorNot on July 22, 2015 [–]

It's openly pointed out in the docs that it's intended to prevent unintentional system alterations, not stop an actively hostile program - i.e. there's not a lot of confidence from the devs in it's isolation levels yet.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact