Re:Nsjail – A light-weight process isolation tool for Linux
by audidude on Monday October 16, 2017 @12:46AM
(#15480881)
bwrap allows passing a FD containing the seccomp rules (--seccomp FD w/ seccomp_export_bpf). If it can export the compiled eBPF it should be trivial to use kafel profiles w/ bubblewrap/atomic/flatpak/etc.
[ Parent
| on HN ]
There are no comments on this comment yet.