"Tree-shaped" sandbox: multi-layer nesting and branching, like a “tree” composed of multiple sub-containers. A sandbox is composed of multiple layered sub-containers. With this design, “untrusted” procs and “semi-trusted” procs run in different layers of a sandbox;...
Dockerand
