Because they were never designed to be a security mechanism. Containers, the practical combination of some Linux namespaces, were created as a way to easily package, distribute and ship things. They weren't designed to be a sandbox or limit what the process inside of it can do.
1 comment
[ 3.4 ms ] story [ 20.6 ms ] thread