Ian: Rework the seccomp filter
Opened this issue · 1 comments
zenhack commented
On the bpf_asm branch on my fork I have some WIP on two related things:
- Converting the seccomp filter from libseccomp to bpf assembly (sandstorm-io/sandstorm#2989)
- Make it into a whitelist, rather than a blacklist.
zenhack commented
The branch was merged a while back, but the new filter still needs some adjustments before it can run all existing apps.