Advanced · Module 9 · Lesson 12 of 13
Capabilities and seccomp Sandboxing
Reduce Linux process privilege with capabilities, no-new-privs, and seccomp filters while preserving only required operations.
Pro — members onlyAbout 18 minutes
By the end you can
- Explain why root is split into capabilities
- Drop privileges and prevent privilege regain
- Describe seccomp system-call filtering
- Design a least-privilege process boundary
Builds on Linux Namespaces and cgroups, Process Environments, Resource Limits, and Daemon Startup.
01 · A question first
A service may need to bind a low port but should not have unrestricted root powers. How can Linux grant one narrow privilege and deny dangerous system calls?
Make a guess before you read on.
02 · The idea
Members only
Unlock the full lesson
This lesson is part of the membership. Join to read it in full, along with every other premium deep dive.
What's inside
- Least privilege
- no_new_privs and seccomp
- Install a small seccomp policy
- Construct the boundary in stages
- Test escape and failure paths
- Limits of the boundary
- Where it is used
- Operational checklist
Something wrong with this lesson? Report a problem