Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

No. What you are thinking about is sandboxing, which is not docker's main objective and can be done with many better tools like firejail.

docker adds its own daemon that creates additional attack surface that you would not have otherwise.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: