From Capabilities to AppArmor: Layering Linux Runtime Security

Over the past year I have written ad nauseum about Linux security primitives. And of course quite a bit of time has been dedicated to how these connect into Kubernetes. Some of the cooler aspects incl