Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on EBPFSnitch: An eBPF based Linux Application Firewall. Parent comment
Not sure if running a program as root in a container is the best approach to "fully sandbox" - depends on what the goal is, obviously.
There are no comments on this comment yet.
Not sure if running a program as root in a container is the best approach to "fully sandbox" - depends on what the goal is, obviously.