Repository navigation
Remove seccomp features #970
Description
The implementation to isolate each sandbox execution is not without fault, and it creates more problems than it solves.
The user of the Hyperlight library could potentially choose the best suited constraints for the sandbox based on the scenario they build the application for.
The executing thread/process isolation is not the goal of this library
Activity
hello-worldexample #946hello-worldexample #946hello-worldexample #946SYS_futex,SYS_write,SYS_close, andSYS_mmapfrom list of default allowed syscalls for seccomp on Linux #183