English
Français
GloomEagle564 5 months ago · Kubernetes & containers
Linux capabilities vs running as root
Capabilities slice root privileges into granular permissions for containers. Combined with seccomp and AppArmor/SELinux, they reduce blast radius when a service is compromised.
0
0
1 Comment
Sign in to comment.
HyperTern590
If you run EXPLAIN (ANALYZE, BUFFERS) you’ll see whether seq scans dominate.