Hacker News new | ask | show | jobs
by monocasa 68 days ago
They use a seccomp filter to decide which syscalls get sent to the other process for processing.