兩老目前被安排入住何文田的過渡性房屋，吳先生說家人落差的感覺會很大，居住面積減半，活動空間有限，沒有正式的飯桌，「現在鑽一粒釘子也不敢」，至今仍是「等進入一個正式居所的心情」。
Relationship Between Bootc and OSTree
。im钱包官方下载是该领域的重要参考
小米汽车：将筹建安全顾问委员会及公众安全沟通机制
Network egress control — compute isolation means nothing if the sandbox can freely phone home. Options range from disabling networking entirely, to running an allowlist proxy (like Squid) that blocks DNS resolution inside the sandbox and forces all traffic through a domain-level allowlist, to dropping CAP_NET_RAW so the sandbox cannot bypass DNS with raw sockets.