3 ms·
Depends on what you mean by "in the wild". AFAIK it's not packaged by any major distro, but it has a user base.
by imiric 3y ago
Depends on what you mean by "in the wild". AFAIK it's not packaged by any major distro, but it has a user base.
- _joel 3y agoThere's been a more recent discussion and indeed, a fair few people are using it in the wild as they don't need to deal with SECCOMP or whatever.
- crest 3y agoAre seccomp and/or ebpf flexible and accesible enough implement pledge and unveil as a wrapper usable to unprivileged processes (even if it requires the help of a privileged helper daemon)?
- _joel 3y agoPossibly useful info: https://news.ycombinator.com/item?id=38002064 https://news.ycombinator.com/item?id=38002064