Hacker News new | ask | show | jobs
by Animats 442 days ago
The classic example of a fully-seccomp'd subprocess is decoding / decompression.

Yes. I've run JPEG 2000 decoders in a subprocess for that reason.