🧰 seccomp

The items that name it 6

• | Blog | Endor Labs
  article2026-10-06

  Linux syscall filtering mechanism used to constrain agent subprocess trees

• Sandboxes Explained: What Each Type Actually Isolates | Blog | Endor Labs
  article2026-10-02

  Filters which syscalls a containerized process may make.

• Package Manager Sandboxing (Andrew Nesbitt)
  article2026-09-24It is written here as seccomp (syscall filtering).

  syscall filtering

• Top AI coding agent security resources — September 2026
  article2026-09-03

  Container-level syscall filtering as part of a seven-layer agent harness defense stack

• Copy Fail (CVE-2026-31431): Universal Linux Local Privilege Escalation Vulnerability
  advisory2026-05-01

  used to apply policies blocking AF_ALG socket creation as a temporary mitigation

• cks/tasks/cks/course/README.md at master · ViktorUJ/cks
  courseIt is written here as seccomp (syscall filtering, chapter 11).

  syscall filtering, chapter 11

In every workspace you can read 7