Surely opening files is the key operation to sandbox

Posted Jan 20, 2026 13:21 UTC (Tue) by alip (subscriber, #170176)
In reply to: Surely opening files is the key operation to sandbox by epa
Parent article: Task-level io_uring restrictions

Another option is to have an API to emulate io_uring through seccomp-unotify (like Syd) or seccomp-trap (like gVisor).