In terms of attack surface, how does this compare to just using AppArmor or SELinux, without containers?
In terms of attack surface, how does this compare to just using AppArmor or SELinux, without containers?