Cgroups are important for stability, but they are not a security boundary. They prevent denial-of-service, not escape. A process constrained by cgroups still makes syscalls to the same kernel with the same attack surface.
如果说字节跳动作为一个「外人」，做的尝试对国民级 app 犯了「大不敬」——Google 来做这件事情，意义就完全不一样了。
，推荐阅读safew官方版本下载获取更多信息
（一）扰乱机关、团体、企业、事业单位秩序，致使工作、生产、营业、医疗、教学、科研不能正常进行，尚未造成严重损失的；
You don't have permission to access the page you requested.
Москвичи пожаловались на зловонную квартиру-свалку с телами животных и тараканами18:04