4 ms·
Still I was very negatively surprised about the code complexity of the seccomp integration.
by irundebian 9y ago
Still I was very negatively surprised about the code complexity of the seccomp integration.
- viraptor 9y agoIt's a very detailed implementation by dedicated people. It includes the namespace setup and mounts. It's not a great thing to show off IMO. You can get good results with much smaller implementations too. See my patch to memcached for example: https://github.com/memcached/memcached/pull/275/files https://github.com/memcached/memcached/pull/275/files
- irundebian 9y agoThank you.