Skip to main content

Seccomp

Browse all articles, tutorials, and guides about Seccomp

2posts

Posts

Kubernetes
|13 min read

Build the Container Boundary You Do Not Have: Seccomp Profiles with the Security Profiles Operator

A container is not a security boundary out of the box, but you can build one. Here is a hands-on guide to recording, tuning, and enforcing seccomp profiles with the Security Profiles Operator, which just shipped v1.0.

DevOps
|12 min read

CVE-2026-31431 Copy Fail: A 4-Byte Kernel Write That Escapes Containers

A new Linux kernel bug lets any unprivileged process flip 4 bytes in the page cache and break out of a container. runtime-default seccomp does not block it. Here is what to do.