Supports direct filesystem access and who knows what else. It is unsuitable for running untrusted code on Linux.