1 comment

[ 3.4 ms ] story [ 11.7 ms ] thread
It would be interesting to see how this is used in practice. Is lucid inside of a lxc container? Are there other policies used to lock this down further?