News for hackers. Stuff that matters.
Re:Nsjail – A light-weight process isolation tool for Linux by audidude on Monday October 16, 2017 @12:46AM (#15480881)
bwrap allows passing a FD containing the seccomp rules (--seccomp FD w/ seccomp_export_bpf). If it can export the compiled eBPF it should be trivial to use kafel profiles w/ bubblewrap/atomic/flatpak/etc.

There are no comments on this comment yet.