[declan_roberts]

seccomp is heaps better than selinux, but still too overly complicated to be using in everyday production unless you're truly on the "refine and secure" path or dealing with high-stakes sandboxing.

[johnkoepi]

way too different things, everyone using seccomp when they don't have AppArmor only profile. sometimes even do both.