seccomp/libseccomp
View on GitHub ↗ ★ 934 C
The main libseccomp repository
9 mentions on Hacker News by 7 people: 0 stories, 9 comments · first 2016-03-21 · latest 2026-02-22
20082026
-
…cgroups are also very different to seccomp and the latter is even maintained independently: https://github.com/seccomp/libseccomp/releases > Somehow we ended up with an overengineered mess of leaky abstractions for cloud-based,…
comment by shevy-java · 2026-02-22 · in Back to FreeBSD: Part 1 -
…means you don't have to deal with BPF directly, but pledge() is obviously much much easier. 0. https://github.com/seccomp/libseccomp
comment by roryrjb · 2022-07-14 · in Show HN: Porting OpenBSD Pledge() to Linux -
Yeah the idea of wrangling raw BPF is a bit daunting. Just FYI, libseccomp ( https://github.com/seccomp/libseccomp ) exists to abstract away all the BPF stuff. It even comes prepackaged by the major distros (ex…
comment by d110af5ccf · 2021-04-12 · in Zoom zero-day discovery -
https://github.com/seccomp/libseccomp BPF src: https://vigilance.fr/vulnerability/libseccomp-privilege-esca... src: https://cert.europa.eu/cert/filteredition/en/Vulnerabilities...
comment by based2 · 2019-08-03 · in Libseccomp before 2.4.0 bad 64-bit arg compar – bypass seccomp filters and ppe -
…pledge? I haven't really used the seccomp syscall or eBPF directly but I have used libseccomp ( https://github.com/seccomp/libseccomp ) successfully.
comment by roryrjb · 2019-06-06 · in OpenBSD Recent Security Innovations -
…seccomp[1] too, in case you didn't already know. Changing it would maybe avoid confusion. [1]: https://github.com/seccomp/libseccomp
comment by ktta · 2017-02-02 · in Show HN: SECCOMP – A Secure Spreadsheet -
…does. It also uses "pseudo" names for the syscalls, so there's one place to look up the list: https://github.com/seccomp/libseccomp/blob/master/include/se... The aliases that pledge offers (like stdio) that sum up logical groups would be…
comment by tyingq · 2016-04-10 · in Support of OpenBSD pledge(2) in programming languages -
…), but I don't see a huge difference between it and pledge. [1] https://github.com/seccomp/libseccomp
comment by tyingq · 2016-04-10 · in Support of OpenBSD pledge(2) in programming languages -
…hardening and analyzing vulnerabilities potential impact on your system seems almost extreme ;-) https://github.com/seccomp/libseccomp/issues/27 I see you have an App Market -- is anyone selling apps for Sandstorm, or are they all free? If…
comment by zaroth · 2016-03-21 · in Sandstorm's security track record, and what it means for self-hosting