The Linux security space is pretty screwed up in general. E.g. seccomp is pretty much unusable: https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.html

The Linux security space is pretty screwed up in general. E.g. seccomp is pretty much unusable: https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.html https://blog.habets.se/2022/03/seccomp-unsafe-at-any-speed.h... Another post of mine about how to drop privileges in Linux, and how hard it is: https://blog.habets.se/2022/03/Dropping-privileges.html https://blog.habets.se/2022/03/Dropping-privileges.html I've started writing a library for dropping privs (as if that should even be necessary), but the devil is in the details, so I've not pushed the code yet. The beginnings of it is here: https://github.com/ThomasHabets/libdropprivs https://github.com/ThomasHabets/libdropprivs