<?xml version="1.0" encoding="utf-8" standalone="yes" ?>
<rss version="2.0" 
  xmlns:content="http://purl.org/rss/1.0/modules/content/" 
  xmlns:dc="http://purl.org/dc/elements/1.1/" 
  xmlns:atom="http://www.w3.org/2005/Atom" 
  xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" 
  xmlns:media="http://search.yahoo.com/mrss/">
  <channel>
    <title>Capabilities on Mark 的滿紙方糖言</title>
    <link>https://blog.mygraphql.com/zh/tags/capabilities/</link>
    <description>Recent content in Capabilities on Mark 的滿紙方糖言</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh</language>
    <managingEditor>labile.zhu@gmail.com (Mark Zhu)</managingEditor>
    <webMaster>labile.zhu@gmail.com (Mark Zhu)</webMaster>
    <copyright>Mark Zhu ©2026, All Rights Reserved</copyright>
    <lastBuildDate>Sun, 05 Jun 2022 16:12:15 +0900</lastBuildDate>
    
        <atom:link href="https://blog.mygraphql.com/zh/tags/capabilities/index.xml" rel="self" type="application/rss+xml" />
    

      
      <item>
        <title>兜兜转转——Linux/容器的权限(Capabilities)控制模型</title>
        <link>https://blog.mygraphql.com/zh/notes/low-tec/kernel/process-capabilities/</link>
        <pubDate>Sun, 05 Jun 2022 16:12:15 +0900</pubDate>
        <author>labile.zhu@gmail.com (Mark Zhu)</author>
        <atom:modified>Sun, 05 Jun 2022 16:12:15 +0900</atom:modified>
        <guid>https://blog.mygraphql.com/zh/notes/low-tec/kernel/process-capabilities/</guid>
        <description>&lt;p&gt;&lt;img src=&#34;https://blog.mygraphql.com/zh/notes/low-tec/kernel/process-capabilities/index.assets/image-20220605183022151.png&#34; alt=&#34;image-20220605183022151&#34;&gt;&lt;/p&gt;
&lt;h2 id=&#34;引&#34;&gt;引&lt;/h2&gt;
&lt;blockquote&gt;
&lt;p&gt;如果有人问我，程序员做的事，最没实际价值，最容易让用户不爽的是什么?&lt;/p&gt;
&lt;p&gt;回答: —— 安全&lt;/p&gt;
&lt;p&gt;如果有人问我，程序员做的事，最必要的是什么?&lt;/p&gt;
&lt;p&gt;回答: —— 安全&lt;/p&gt;
&lt;p&gt;如果有人问我，安全核心问题是什么?&lt;/p&gt;</description>
        
        <dc:creator>Mark Zhu</dc:creator>
        
        
        
        
          
            
              <category>capabilities</category>
            
          
            
              <category>kernel</category>
            
          
            
              <category>security</category>
            
          
            
              <category>container</category>
            
          
        
        
        
      </item>
      

    
  </channel>
</rss>
