#system-calls

How the Sentry Intercepts System Calls to Contain Untrusted Agent Code

The Sentry in gVisor mediates every system call from untrusted code, reducing the host attack surface. Learn how interception works and why it matters for