A sandbox mode for the kernel

Posted Feb 29, 2024 19:51 UTC (Thu) by Cyberax (✭ supporter ✭, #52523)
Parent article: A sandbox mode for the kernel

WASM.

/me runs and takes a cover.

But really, this should be a good application for eBPF. Especially because the code in question is not performance-critical.