Lesson 5 of 9 · 30m

Dropping Capabilities and Filtering Syscalls

Why the default capability set is too generous, when to drop ALL, and what seccomp is already blocking for you.