> memfd_create is also one of those wat kind of system calls, which initially don't appear to enable any use case that couldn't be accomplished by other means

> memfd_create is also one of those wat kind of system calls, which initially don't appear to enable any use case that couldn't be accomplished by other means The author agrees with that. It's just a bit simpler. See e.g. https://dvdhrm.wordpress.com/tag/memfd/ https://dvdhrm.wordpress.com/tag/memfd/ The benefits of the system call according to above link are: 1) memfd_create does not require a local mount-point 2) There are no name-clashes and no global registry 3) the code required for memfd_create is 100 lines 4) sealing