3 ms·
SECCOMP_SET_MODE_STRICT is pretty hard to use - you cannot allocate memory for example.
by justincormack 10y ago
SECCOMP_SET_MODE_STRICT is pretty hard to use - you cannot allocate memory for example.
- catern 10y agoI did not realize that. Given that, I was incorrect when I said that the author (or anyone) could easily use seccomp MODE_STRICT. Capsicum may still be easy to use. And seccomp-bpf is not that complex either.