3 ms·
>the binary is smaller and thus offers less attack surface, which I think is the usual concern. Another concern is the huge attack surface that is the Linux ke
by hollerith 2y ago
>the binary is smaller and thus offers less attack surface, which I think is the usual concern.
Another concern is the huge attack surface that is the Linux kernel.
- fpoling 2y agoFirejail attempts to mitigate that with secomp filters.