Comment by Kaxo

The seccomp-BPF rules seem almost unusably strict. What is this even designed to be used to run?