It's a bird, it's a plane, it's

Everything here is my opinion. I do not speak for your employer.
← Some good news about women in engineering.
"I'm pretty sure the secret service is like vampires →

2015-03-07 »

Oh wow.  This is the first I've heard of seccomp(2), but it looks amazingly elegant.

http://man7.org/linux/man-pages/man2/seccomp.2.html

In particular SECCOMP_SET_MODE_STRICT looks like it would be very easy to use (and pretty easy for any Unix-like kernel to implement) and would be great for things like packet parsers that just read stdin and write stdout.

Related 
I thought this was interesting: (2015)
The log/event processing pipeline you can't have (2019)
Unrelated 
Based on a co-worker's recommendation (2016)

I'm CEO at Tailscale, where AI runs on us, not the other way around.

You can find me on Bluesky. Or subscribe with RSS.

apenwarr on gmail.com