opinions 1.2.0
On Linux seccomp
provides way to restrict access to kernel functions. It is more restricted than pledge
promises, but also more difficult to use (especially in managed code).
Linux sandboxing is currently available only on amd64
architecture.