Joanna Rutkowska @rootkovska
Agree! I've been long pointing out that app-specific SANDBOXING is a maintenance nightmare, and doesn't scale to ma… https://t.co/Wx5LmYlN56 — PolitiTweet.org
CopperheadOS @CopperheadOS
"seccomp filters (and certain SELinux and AppArmor policies) are incompatible with the GNU/Linux model, where every… https://t.co/BRkcQD1L18