In this way, it should have no more access to the host system than it would running in a docker container. But since it is running directly on the host filesystem, it should eliminate the numerous ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results