Most of the rest of the policy merely is there to grant the container sufficient privilege to access bits of the system: network ports, devices, consoles, etc.
剩余的策略主要是授与容器充分的特权,以访问系统的各个部分:网络端口、设备和控制台等。
2
Tivoli Security Policy Manager - Provides a uniform point of administration of users, federation of user information, and privilege management.