2 ms·
Or you could argue that seccomp lacks a libc-like wrapper library with easier to use abstractions around the syscall. Then you would only have to update the li
by the8472 7y ago
Or you could argue that seccomp lacks a libc-like wrapper library with easier to use abstractions around the syscall.
Then you would only have to update the library to work with new kernel versions.
- temac 7y agoYes but like I said: this layer does not exist, and to my knowledge nobody intend to create it. It would be a big amount of work too, compared to the pledge approach...