Posted May 10, 2011 22:03 UTC (Tue) by mhelsley (subscriber, #11324)
Parent article: Expanding seccomp
Very interesting indeed. Checkpoint/restart (out-of-tree at present) might be able to use expanded seccomp to nicely detect and limit unsupported interface usage in forward-compatible ways.