Comment Comment by corv Interesting! The sandboxing space definitely deserves more attention.On the other side of the spectrum, we're working on a lightweight approach that augments user namespaces with libseccomp to filter syscalls via BPF.https://github.com/corv89/shannot parent corv 11 months ago
On the other side of the spectrum, we're working on a lightweight approach that augments user namespaces with libseccomp to filter syscalls via BPF.
https://github.com/corv89/shannot