That’s solved as of last week, you can use cBPF now to disable functionality.
replyHow solved? AFAIK it's not meaningfully shipped but happy to hear otherwise.
replyyou can now disable opertions with cBPF, like you would be able to with seccomp for normal syscalls.
reply