#seccomp

Kernel & Low-Level4d ago

SPARC64 gains Linux seccomp filter support

The architecture was one of the last without the BPF sandboxing Docker, systemd, and Flatpak rely on.

By kexec

Kernel & Low-Level80d ago

Seccomp gains non-cooperative pin redirect to close TOCTOU

A kernel series lets sandbox supervisors feed immutable syscall arguments into uncooperative targets without a trusted setup window.

By oops