The Sentry intercepts the untrusted code’s syscalls and handles them in user-space. It reimplements around 200 Linux syscalls in Go, which is enough to run most applications. When the Sentry actually needs to interact with the host to read a file, it makes its own highly restricted set of roughly 70 host syscalls. This is not just a smaller filter on the same surface; it is a completely different surface. The failure mode changes significantly. An attacker must first find a bug in gVisor’s Go implementation of a syscall to compromise the Sentry process, and then find a way to escape from the Sentry to the host using only those limited host syscalls.
隐藏文件的展示策略也是影响用户感知的关键因素。macOS 默认不显示以点号开头的文件，而在 Windows 上，用户开启「显示隐藏文件」后即可看到 .DS_Store。但「显示隐藏文件」并不会展示 Desktop.ini，因为后者还被标记为「受保护的操作系统文件」，需要更深层级的设置才能取消隐藏。因此，如果用户经常在 macOS 与 Windows 间交换数据，对 .DS_Store 文件的感知还会更加强烈。
，详情可参考Line官方版本下载
App Store、Apple Music、播客个人页面标题栏统一为彩色图标 + 左对齐布局；
RUN dnf install -y ${BASE_PKG} && \