Comment by somethingnew

Here's a summary from the Docker perspective https://blog.docker.com/2016/04/docker-security/