> The real vulnerability of concern IMO is that the sandbox was so easily escaped. Linux lacks effective sandboxing. It *does* have complex, comprehensive, po

> The real vulnerability of concern IMO is that the sandbox was so easily escaped. Linux lacks effective sandboxing. It *does* have complex, comprehensive, powerful, and therefore hard-to-use sandboxing, which is the actual root of the problem here: if security is difficult to implement, it will often end up being ineffective. Compare <https://man7.org/linux/man-pages/man2/seccomp.2.html https://man7.org/linux/man-pages/man2/seccomp.2.html> vs <http://man.openbsd.org/pledge.2 http://man.openbsd.org/pledge.2>. The two mechanisms have roughly the same goals. The former requires writing a BPF program; the latter is a single function call.