Hacker News new | ask | show | jobs
by NewJazz 659 days ago
seccomp at least restricts access to certain kernel APIs. Although it is quite brittle.