3 ms·
AIUI new Debian supports enough ebpf that it doesn't need an unsandboxed kernel module, which is a useful point of comparison. Though yeah, an OS can only do so
by yjftsjthsd-h 2y ago
AIUI new Debian supports enough ebpf that it doesn't need an unsandboxed kernel module, which is a useful point of comparison. Though yeah, an OS can only do so much to limit a problem running with root, and security software legitimately needs a lot of power.