Главная
Study mode:
on
1
Introduction
2
Why use libseccomp
3
What is call filtering
4
Cisco filtering history
5
BPF
6
BPF Improvements
7
Documentation
8
Eye Chart
9
Questions
10
Whitelist vs Blacklist
11
Other considerations
12
Making a Simple C Program
13
Making mistakes
14
Improved logging
15
Strace
16
Exit
17
Question
18
Adding parameters
19
Strings
20
Printing
21
String Matching
Description:
Explore the fundamentals of libseccomp in this comprehensive tutorial led by Tom Hromatka from Oracle and Paul Moore from Cisco. Delve into the importance of the Linux Kernel's seccomp feature for restricting syscalls and enhancing process isolation. Learn how libseccomp simplifies the creation and maintenance of seccomp filters, crucial for container security. Follow along as the libseccomp maintainers guide you through practical examples, from basic C programs to advanced techniques like parameter addition and string matching. Gain insights into whitelist vs blacklist approaches, logging improvements, and troubleshooting with strace. Perfect for developers and system administrators looking to bolster their understanding of system call filtering and improve application security.

The Why and How of libseccomp

Linux Foundation
Add to list