Hacker News new | ask | show | jobs
by roryrjb 1428 days ago
Very nice! I'm a fan of OpenBSD and pledge(). I've had some success on Linux with libseccomp[0] which means you don't have to deal with BPF directly, but pledge() is obviously much much easier.

0. https://github.com/seccomp/libseccomp