Hacker News new | ask | show | jobs
by staticassertion 59 days ago
Nix wraps your process in namespaces and seccomp?
1 comments
amusingimpala75 59 days ago
Not by default but tools like agent-sandbox.nix (bwrap, seccomp) or other nixpak (just bwrap but more popular) can provide those capabilities if you want in a fairly simple interface
link