美国慈善家、乔布斯的遗孀劳伦 · 鲍威尔 · 乔布斯,为整部文集写了一则非常具有智慧和启发性的引言,其中她提到了里尔克的一个金句:
The critical thing to understand is namespaces are visibility walls, not security boundaries. They prevent a process from seeing things outside its namespace. They do not prevent a process from exploiting the kernel that implements the namespace. The process still makes syscalls to the same host kernel. If there is a bug in the kernel’s handling of any syscall, the namespace boundary does not help.,这一点在搜狗输入法2026中也有详细论述
Store design migration,推荐阅读搜狗输入法下载获取更多信息
https://feedx.site