简介：Patrol旨在增强Linux Container的文件系统隔离，结合基于数据流与控制流的访问控制模型，扩展了mount namespace对文件系统资源的虚拟化与隔离能力，可有效阻断容器或宿主机中非法的文件系统访问行为，消除了已知容器隔离逃逸漏洞，显著增强了容器间的隔离能力。
Contributions last year: 0
Max continuous contributions: 0
Recent contributions: 0
Commits, issues, and pull requests will appear on your contribution graph. Only when the email address used for the commits in local configuration is associated with your GitOSC account, the commits' contribution will be counted.