@GrapheneOS @lispi314 Seccomp here
isn't to supplement access control policy for resources but to shut off large swaths of kernel interface surface that you don't want to be attack surface. So lack of memory inspection is not an issue.
Embed Notice
HTML Code
Corresponding Notice
- Embed this notice
Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 04-Feb-2025 15:55:03 JST Rich Felker