理解Seccomp

本文主要是介绍理解Seccomp，希望对大家解决编程问题提供一定的参考价值，需要的开发者们随着小编来一起学习吧！

• Seccomp

  seccomp (short for secure computing mode) is a computer security facility in the Linux kernel.

  seccomp allows a process to make a one-way transition into a “secure” state where it cannot make any system calls exit(), sigreturn(), read(), write() to already open file descriptor.

• History

  seccomp was first devised by Andrea Arcangeli in January 2005 for use in public grid computing and was originally intended as a means of safely running untrusted compute-bound programs.

  It was merged into the Linux kernel mainline in kernel version 2.6.12, which was released on March 8, 2005.

• Linux kernel mainline

  mainline, stable, longterm are all type of Linux Kernel.

  The Linux kernel is a free and open-source, monolithic, modular, multitasking, Unix-like operating system kernel.

  It was conceived and created in 1991 by Linus Torvalds for his i386 based PC.

这篇关于理解Seccomp的文章就介绍到这儿，希望我们推荐的文章对编程师们有所帮助！

---