41554 blogs · 4,504,310 posts Claim your blog

Record · corpus.blog/posts/01a087d2-dc89-7010-bd91-6815c11dc1b3

Sandboxing: Process isolation, seccomp and policies

renato.boo · published 11 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at renato.boo Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 2,596

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://youtu.be/I_FB9bwyp6M

youtu.be

https://en.wikipedia.org/wiki/Namespace

en.wikipedia.org

https://github.com/torvalds/linux/blob/v7.1-rc3/arch/x86/entry/syscalls/syscall_64.tbl

github.com

https://docs.kernel.org/filesystems/proc.html

docs.kernel.org

https://github.com/torvalds/linux/blob/master/include/uapi/linux/seccomp.h

github.com

https://github.com/moby/profiles/blob/main/seccomp/default.json

github.com

https://github.com/microsoft/WSL/blob/master/src/linux/init/SecCompDispatcher.cpp

github.com

https://github.com/chromium/chromium/blob/89479c9217e935a6711387b7604f0cd59582ca70/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc

github.com

https://chromium.googlesource.com/chromiumos/docs/+/master/sandboxing.md

chromium.googlesource.com

https://kubernetes.io/docs/tutorials/security/seccomp/

kubernetes.io

https://some-natalie.dev/container-escapes-seccomp/

some-natalie.dev

https://github.com/draios/sysdig

github.com

https://apparmor.net/

apparmor.net

https://man7.org/linux/man-pages/man7/capabilities.7.html

man7.org

https://man7.org/training/download/secisol_cgroups_v2_slides-mkerrisk-man7.org.pdf

man7.org

https://man7.org/conf/openfest2015/limiting_kernel_attack_surface_with_seccomp-OpenFest_2015-Kerrisk.pdf

man7.org

https://www.conradk.com/process-security-linux/

conradk.com