Cgroups are important for stability, but they are not a security boundary. They prevent denial-of-service, not escape. A process constrained by cgroups still makes syscalls to the same kernel with the same attack surface.
Offers free version
，推荐阅读safew官方下载获取更多信息
第五十三条 有下列行为之一的，处五日以下拘留或者警告；情节较重的，处五日以上十日以下拘留，可以并处一千元以下罚款：
�@�����Ȋw�����ق�2��27���A�F�̊��u���s�X���Y���v���V�����������s�Ō������Ɣ��\�����B�����ł̎Y�o���m�F�����͍̂����Ƃ����B�ʂ̍z���Ƃ̌��F���A���̏ꏊ���玝�����܂ꂽ�ƌ��Ȃ������Ȃǂ̗��R�ŁA�����܂Ŋm�F�����������Ă����\���������A���コ���Ȃ锭�������҂������B
Stop listening to the 'alpha male' grift