Hacker News new | past | comments | ask | show | jobs | submit
thomashabets2 | on: FreeBSD Capsicum vs. Linux Seccomp Process Sandboxing
That's the approach I meant by "that approach", the library the parent commenter was talking about writing for a customer. Compare this to Landlock or OpenBSDs pledge/unveil.