Sergey Bronnikov
added category
13:55
+19
Sergey Bronnikov
no edit summary
13:53
+113
Sergey Bronnikov
Created page with "Now CT starts in a new user namespace. This allows us: * to remove our capabilities (CAP_VE_*) * to improve security of our containers, because a process doesn't have privileg..."
13:50
+501