Seccomp BPF

SECure COMPuting mode with BPF filters, used to restrict which system calls a process can make for sandboxing and hardening.

API entry from apis.yml

apis.yml Raw ↑
aid: linux:seccomp-bpf
name: Seccomp BPF
description: SECure COMPuting mode with BPF filters, used to restrict which system calls a process can
  make for sandboxing and hardening.
humanURL: https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html
tags:
- Security
- Sandboxing
- Syscalls
properties:
- type: Documentation
  url: https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html