The kernel patchset I was referring to is https://github.com/google/capsicum-linux https://github.com/google/capsicum-linux - it's a Linux version of Capsicum.

The kernel patchset I was referring to is https://github.com/google/capsicum-linux https://github.com/google/capsicum-linux - it's a Linux version of Capsicum. Though now that I look at it more closely, it appears to no longer be maintained. :( That said, the Bytecode Alliance stuff appears to be multi-language, so that's neat! I could see that making WASM runtimes pretty useful even outside the web.