WingNews logo WingNews
top | new | best | ask | show | jobs
top | item 46929605

(no title)

its-summertime | 23 days ago

Outside of VM usage, the answer seems to be (on top of containerization and selinux) writing a tight seccomp filter.

Gleaned from https://github.com/containers/bubblewrap/blob/0c408e156b12dd... and https://github.com/containers/bubblewrap/tree/0c408e156b12dd...

discuss

order

No comments yet.

powered by hn/api // news.ycombinator.com