Hacker News new | past | comments | ask | show | jobs | submit login

contained.af uses seccomp to block a bunch of syscalls that you would not block for a real service, for example socket()



Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: