Evading from linux containers (2011)
blog.bofh.it
blog.bofh.it
http://blog.docker.io/2013/08/containers-docker-how-secure-a...
I still think there is value in understanding the model, and that requires hysteresis. I also included the link (2013) in my comment for that purpose.