[joshuanapoli]

Even so, the scope is different. I don’t use WebAssembly to define networks. Limiting privilege within the WebAssembly runtime is weaker than limiting it at the OS namespace.

[folex]

It depends on specific WASM runtime implementation, but usually you have to be explicit about allowing each syscall.