seccomp

This article needs to be updated. Please help update this article to reflect recent events or newly available information. (May 2012)

seccomp (short for secure computing

seccomp mode is enabled via the prctl(2) system call using the PR_SET_SECCOMP argument, or (since Linux kernel 3.17

Some consider seccomp comparable to OpenBSD pledge(2) and FreeBSD capsicum(4)^{[citation needed]}.

History

seccomp was first devised by Andrea Arcangeli in January 2005 for use in public

• Android 8.0 Oreo.^[12]
• systemd's sandboxing options are based on seccomp.^[13]
• KVM uses seccomp on the parameter --sandbox^[14]
• Docker – software that allows applications to run inside of isolated containers. Docker can associate a seccomp profile with the container using the --security-opt parameter.
• Arcangeli's CPUShare was the only known user of seccomp for a while.^[15] Writing in February 2009, Linus Torvalds expresses doubt whether seccomp is actually used by anyone.^[16] However, a Google engineer replied that Google is exploring using seccomp for sandboxing its Chrome web browser.^[17][18]
• Firejail is an open source Linux sandbox program that utilizes Linux namespaces, Seccomp, and other kernel-level security features to sandbox Linux and Wine applications.^[19]
• As of Chrome version 20, seccomp-bpf is used to sandbox Adobe Flash Player.^[20]
• As of Chrome version 23, seccomp-bpf is used to sandbox the renderers.^[21]
• Snap specify the shape of their application sandbox using "interfaces" which snapd translates to seccomp, AppArmor and other security constructs^[22]
• vsftpd uses seccomp-bpf sandboxing as of version 3.0.0.^[23]
• OpenSSH has supported seccomp-bpf since version 6.0.^[9]
• Mbox uses ptrace along with seccomp-bpf to create a secure sandbox with less overhead than ptrace alone.^[24]
• LXD, a
  Ubuntu "hypervisor" for containers^[25][26]
• Firefox and Firefox OS, which use seccomp-bpf^[27][28]
• Tor supports seccomp since 0.2.5.1-alpha^[29]
• Lepton, a
  Dropbox uses seccomp^[30]
• Kafel is a configuration language, which converts readable policies into seccompb-bpf bytecode^[31]
• Subgraph OS uses seccomp-bpf^[32][33]
• Flatpak uses seccomp for process isolation^[34]
• Bubblewrap is a lightweight sandbox application developed from Flatpak^[35]
• minijail^[36] uses seccomp for process isolation^[37]
• SydBox uses seccomp-bpf^[38] to improve the runtime and security of the ptrace sandboxing used to sandbox package builds on Exherbo Linux distribution.
• File, a Unix program to determine filetypes, uses seccomp to restrict its runtime environment^[39]
• Zathura, a minimalistic document viewer, uses seccomp filter to implement different sandbox modes^[40]
• Tracker, a indexing and preview application for the GNOME desktop environment, uses seccomp to prevent automatic exploitation of parsing vulnerabilities in media files^[41]

References

External links

• Official website (Archived)
• Google's Chromium sandbox, LWN.net, August 2009, by Jake Edge
• seccomp-nurse, a sandboxing framework based on seccomp
• Documentation/prctl/seccomp_filter.txt, part of the Linux kernel documentation
• Security In-Depth for Linux Software: Preventing and Mitigating Security Bugs