seccomp (short for secure computing) is a computer security facility in the Linux kernel. seccomp allows a process to make a one-way transition into a...
16 KB (1,271 words) - 12:45, 11 July 2024
involves HTML rendering in a Web browser. Secure Computing Mode (seccomp) strict mode, seccomp only allows the write(), read(), exit(), and sigreturn() system...
10 KB (1,000 words) - 12:08, 14 June 2024
servers. Docker also consequently disabled io_uring from their default seccomp profile.[original research?] "Linux Kernel Getting io_uring To Deliver...
6 KB (699 words) - 19:01, 9 July 2024
in tabs using tabbed. Zathura implements an optional sandbox mode using seccomp filter to restrict the consequences of potential vulnerabilities. Free...
7 KB (448 words) - 04:33, 8 December 2023
communication requests initiated by the user. On Linux sandboxing uses the seccomp mode. In January 2015, TorrentFreak reported that using Chrome when connected...
202 KB (17,671 words) - 12:56, 11 August 2024
kernel.org. April 2011. Retrieved 1 July 2022. "Yet another new approach to seccomp". LWN. 1 January 2012. Retrieved 1 July 2022. "BPF updates". lore.kernel...
43 KB (3,707 words) - 06:49, 11 August 2024
Rump kernel User-mode Linux vkernel Related kernel features BrandZ cgroups chroot namespaces eBPF seccomp Orchestration Amazon ECS Kubernetes OpenShift...
1 KB (133 words) - 11:37, 18 October 2022
Rump kernel User-mode Linux vkernel Related kernel features BrandZ cgroups chroot namespaces eBPF seccomp Orchestration Amazon ECS Kubernetes OpenShift...
6 KB (555 words) - 13:33, 27 June 2024
GPU access. Further constraints were placed on the media stack through seccomp. Various mechanisms were enabled to reduce the possibility of malicious...
43 KB (3,900 words) - 19:16, 12 August 2024
(@uT_infection) for a bunch of stuff, notably assisting greatly with porting the seccomp-bpf policy generator to gosecco as well as the early version of the log...
3 KB (212 words) - 22:55, 7 December 2023
administrator control. For example, on some versions of the Linux kernel, seccomp sandboxing mode disables RDTSC. It can also be disabled using the PR_SET_TSC...
10 KB (1,156 words) - 18:09, 25 June 2024
SCHED_DEADLINE SCHED_FIFO SCHED_RR Security Modules: AppArmor Exec Shield seccomp SELinux Smack Tomoyo Linux Linux PAM Device drivers 802.11 graphics Raw...
6 KB (535 words) - 13:13, 25 October 2023
Yes Yes LSM (SELinux, SMACK, TOMOYO Linux, AppArmor) seccomp keyctl fanotify SELinux Sandbox, seccomp SYN cookies hash tables ICMP rate limiting reverse...
72 KB (1,206 words) - 13:20, 31 July 2024
profoundly differ in complexity and scope. Another security feature is the Seccomp BPF (SECure COMPuting with Berkeley Packet Filters) which works by filtering...
188 KB (17,569 words) - 02:18, 30 July 2024
bit ? ? No No Unknown >0 Linux-based 2.6.39 POSIX, ACLs, MAC chroot, seccomp, Namespaces, SELinux, AppArmor Netfilter, varied by distribution Yes Yes...
78 KB (1,733 words) - 22:21, 1 August 2024
call for them. SIGSYS can be received by applications violating the Linux Seccomp security rules configured to restrict them. SIGSYS can also be used to...
31 KB (3,469 words) - 06:43, 3 April 2024
Rump kernel User-mode Linux vkernel Related kernel features BrandZ cgroups chroot namespaces eBPF seccomp Orchestration Amazon ECS Kubernetes OpenShift...
1 KB (134 words) - 11:59, 13 September 2023
escalation in Systrace Local root exploit on NetBSD Vulnerabilities in systrace Seccomp AppArmor SELinux Mandatory access control Unangst, Ted (25 April 2016)...
6 KB (523 words) - 02:15, 20 November 2023
open-source software portal Google Native Client LXC (LinuX Containers) seccomp Docker (software) "Release 1.0". 20 March 2014. Retrieved 23 July 2018...
7 KB (644 words) - 17:04, 5 July 2024