[holowoodman]

Which would be prone to misconfiguration, accidents and exploits. Better to not include it at all.

[Asmod4n]

Are you saying it’s impossible to misuse disabling the accept syscall but it’s prone to misconfiguration with disabling io_uring_enter?

[holowoodman]

I'm saying that just compiling a kernel with stuff not compiled in is misuse-proof. That way you can disable io_uring entirely (but not accept()).