Software Sandboxing: The Basics

Automated excerpt

Further // - Avoid syscalls that need root anyway. This category mostly contains syscalls useful for // ioctl() is definitively not about generic/stream/basic I/O. ioctl() // anything. However it's expected that any program doing file I/O or // basic IO set to force other IO categories to include it too. // Compat quirks.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.