View analytic
Tuesday, October 6 • 10:30 - 11:20
Using seccomp to Limit the Kernel Attack Surface - Michael Kerrisk

Sign up or log in to save this to your schedule and see who's attending!

The seccomp (secure computing) facility is a means to limit the set of system calls a program may make. Starting from humble beginnings in Linux 2.6.12, seccomp has evolved to the point where it can be used to select exactly which system calls are permitted and to restrict the arguments that may be passed to those system calls. System call filtering is achieved by writing BPF programs--programs written for a small in-kernel virtual machine that is able to examine system call numbers and arguments. Seccomp applications include sandboxing and failure-mode testing, and seccomp is by now used in a number of web browsers, container systems such as Docker, and elsewhere. In this session, we'll look briefly at the history of seccomp before going on to examine the BPF virtual machine and some practical examples of filtering programs that restrict the set of permitted system calls.

avatar for Michael Kerrisk

Michael Kerrisk

Author/Engineer, man7.org
Michael Kerrisk is a trainer, engineeer, and author of The Linux Programming Interface, a widely acclaimed book on Linux (and UNIX) system programming. His primary involvement with Linux is in testing, design review, and documentation of kernel-user-space interfaces. After 13 yea... Read More →

Tuesday October 6, 2015 10:30 - 11:20
Liffey Hall 1