3 ms·
You can do a lot with seccomp filters that would stop even root messing things up too badly, down to path level io filtering unless I misremember
by c45y 1y ago
You can do a lot with seccomp filters that would stop even root messing things up too badly, down to path level io filtering unless I misremember