Linux

seccomp filters for NGINX

2017-01-01

Linux’ BPF based seccomp sandbox is a reasonably powerful way to stop processes from running arbitrary syscalls when owned (or by accident). …