> find it annoying when kernel APIs like ublk require io_uring

Good. That's a forcing function for making io_uring work in your environment.

> bypasses seccomp

Seccomp sucks.

We shouldn't be enforcing security by filtering system calls, the set of which will grow forever, but instead by describing access control rules on objects, e.g. with SELinux. If your security policy is that your sandbox should be able to read from some file but not write to it, you should do that with real MAC, which applies to all operations , il_uring included. You shouldn't just filter read(2) and write(2) in particular.

We shouldn't hold back evolution in systems interfaces because some people are stuck on bad ways of doing things and won't move.