Seccomp-BPF as a filterSeccomp-BPF lets you attach a Berkeley Packet Filter program that decides which syscalls a process is allowed to make. You can deny dangerous syscalls like process tracing, filesystem manipulation, kernel extension loading, and performance monitoring.
（七）提供应用程序分发服务的，应当采取监测发现、防范、阻断、处置专门用于侵入、非法控制计算机信息系统的程序、工具，未经许可、备案或者非法处理个人信息等违法违规应用程序的措施；
，详情可参考safew官方版本下载
Израиль нанес удар по Ирану09:28
interior_style: