3 ms·
There's been a more recent discussion and indeed, a fair few people are using it in the wild as they don't need to deal with SECCOMP or whatever.
by _joel 3y ago
There's been a more recent discussion and indeed, a fair few people are using it in the wild as they don't need to deal with SECCOMP or whatever.
- crest 3y agoAre seccomp and/or ebpf flexible and accesible enough implement pledge and unveil as a wrapper usable to unprivileged processes (even if it requires the help of a privileged helper daemon)?
- _joel 3y agoPossibly useful info: https://news.ycombinator.com/item?id=38002064 https://news.ycombinator.com/item?id=38002064