cid cccb79ddf43975e28245f46c2dc76358c9fb901eb8439a32bfc6006466b078f8 · original · open access · via wikipedia
Title: Seccomp Authors: Venue: Wikipedia Year: unknown Canonical: wiki:seccomp URL: https://en.wikipedia.org/wiki/Seccomp Collector: wikipedia OA: true ABSTRACT seccomp is a computer security facility in the Linux kernel. seccomp allows a process to make a one-way transition into a "secure" state where it cannot make any system calls except exit , sigreturn , read and write to already-open file descriptors. Should it attempt any other system calls, the kernel will either just log the event or terminate the process with SIGKILL or SIGSYS. In this sense, it does not virtualize the system's resources but isolates the process from them entirely.