Tasty » Adam Sampson's seccomp bookmarks

tsgates/mbox: A lightweight sandbox tool for non-root users edit / delete

seccomp-based syscall redirection (it's a bit more than just sandboxing; you could do debug/trace stuff with this technique too).

to linux sandbox seccomp security software syscall ... on 28 February 2016

Using simple seccomp filters edit / delete

A worked example of setting up seccomp system call filters.

to linux seccomp security ... on 01 July 2014