Search Articles — Sudonull

Search Results

From the web

Apr 12, 2026 ·

https://kubernetes.io/docs/tutorials/security/seccomp/

Apr 12, 2026 · To use seccomp profile defaulting, you must run the kubelet with the -- seccomp -default command line flag enabled for each node where you want to use it. If enabled, the kubelet will use the RuntimeDefault seccomp profile by default, which is defined by the container runtime, instead of using the Unconfined ( seccomp disabled) mode.

Feb 21, 2026 ·

https://devsecopsschool.com/blog/seccomp/

Feb 21, 2026 · Seccomp is a Linux kernel facility that restricts the system calls a process can perform, reducing attack surface. Analogy: Seccomp is like a bouncer who only allows approved actions into a secure club. Formal: a kernel-level syscall filtering mechanism implemented via Berkeley Packet Filter (BPF) policies attached to a task.

Feb 22, 2026 ·

https://www.devsecopsnow.com/seccomp/

Feb 22, 2026 · What is seccomp ? seccomp , short for secure computing mode, is a kernel-level feature that allows processes to restrict which system calls they can invoke. It is a pragmatic, lightweight sandbox mechanism designed to reduce the kernel attack surface by allowing only a whitelist or filter-based policy for syscalls. seccomp is not a general-purpose container security tool by itself; it is a ...

Oct 10, 2024 ·

https://pulse.latio.tech/p/why-and-how-to-implement-seccomp

Oct 10, 2024 · Seccomp policies come in three flavors: RuntimeDefault, Localhost, and Unconfined. These flavors tell the container where to look for the seccomp profile to implement, as well as what policies syscalls will be restricted to the container.

Trending Now