Tag
seccomp
2 results tagged "seccomp"
Articles
Safe Computing
zviz vs gVisor vs Firecracker: Sandboxing AI Code
Deny, emulate or virtualise? How zviz's selective-denial container runtime compares with gVisor, Firecracker and WASM for running untrusted AI code.
Safe Computing
Sandboxing Untrusted Code in Zig: The zviz Architecture
How zviz contains untrusted and AI-generated code by selective denial: namespaces, Landlock, seccomp-BPF and cgroups v2, with policy built at Zig comptime.