Hacker News new | ask | show | jobs
by pizlonator 19 days ago
It ends up on the hot path of programs that use process isolation aggressively
1 comments

Sure, and there a primary thing you want is a whole new environment/context for the child (new environment, fds, memory, cgroups, namespaces, etc).