[pkaye]

Why do you feel this way when even OpenBSD hasn't fully worked out all the details (see the slides) and proven it will work well in practice.

[sarciszewski]

Because I think whitelisting the syscalls at init and only being able to drop syscalls is a great idea.