Matches in DBpedia 2016-04 for { <http://dbpedia.org/resource/Seccomp> ?p ?o }
Showing triples 1 to 87 of
87
with 100 triples per page.
- Seccomp abstract "seccomp (short for secure computing mode) is a computer security facility that provides an application sandboxing mechanism in the Linux kernel; it was merged into the Linux kernel mainline in kernel version 2.6.12, which was released on March 8, 2005. seccomp allows a process to make a one-way transition into a \"secure\" state where it cannot make any system calls except exit(), sigreturn(), read() and write() to already-open file descriptors. Should it attempt any other system calls, the kernel will terminate the process with SIGKILL. In this sense, it does not virtualize the system's resources but isolates the process from them entirely.seccomp mode is enabled via the prctl(2) system call using the PR_SET_SECCOMP argument, or (since Linux kernel 3.17) via the seccomp(2) system call. seccomp mode used to be enabled by writing to a file, /proc/self/seccomp, but this method was removed in favor of prctl(). In some kernel versions, seccomp disables the RDTSC x86 instruction.seccomp-bpf is an extension to seccomp that allows filtering of system calls using a configurable policy implemented using Berkeley Packet Filter rules. It is used by OpenSSH and vsftpd as well as the Google Chrome/Chromium web browsers on Chrome OS and Linux.Software products that use seccomp include the following: seccomp was first devised by Andrea Arcangeli in January 2005 for use in public grid computing and was originally intended as a means of safely running untrusted compute-bound programs. Arcangeli's CPUShare was the only known user of this feature. Writing in February 2009, Linus Torvalds expresses doubt whether seccomp is actually used by anyone. However, a Google engineer replied that Google is exploring using seccomp for sandboxing its Chrome web browser. As of Chrome version 20, seccomp-bpf is used to sandbox Adobe Flash Player. As of Chrome version 23, seccomp-bpf is used to sandbox the renderers. Vsftpd uses seccomp-bpf sandboxing as of version 3.0.0. OpenSSH has supported seccomp-bpf since version 6.0. Mbox uses ptrace along with seccomp-bpf to create a secure sandbox with less overhead than ptrace alone. LXD, which is a \"hypervisor\" for containers Firefox and FirefoxOS use seccomp-bpf to sandbox the child processes and certain plugins. Cjdns uses seccomp-bpf as one of its sandbox mechanisms, filtering the system calls it performs on a Linux system, and strictly limiting its access to the outside world. Tor supports seccomp since 0.2.5.1-alpha↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑ ↑".
- Seccomp genre Sandbox_(computer_security).
- Seccomp license GNU_General_Public_License.
- Seccomp operatingSystem Linux.
- Seccomp programmingLanguage C_(programming_language).
- Seccomp status "mainlined".
- Seccomp wikiPageExternalLink 347547.
- Seccomp wikiPageExternalLink seccomp-nurse.
- Seccomp wikiPageExternalLink overview.
- Seccomp wikiPageExternalLink jt-ce-sid_linux.pdf.
- Seccomp wikiPageExternalLink seccomp_filter.txt.
- Seccomp wikiPageID "2477946".
- Seccomp wikiPageLength "10355".
- Seccomp wikiPageOutDegree "34".
- Seccomp wikiPageRevisionID "703581968".
- Seccomp wikiPageWikiLink Berkeley_Packet_Filter.
- Seccomp wikiPageWikiLink C_(programming_language).
- Seccomp wikiPageWikiLink Category:Computer_security.
- Seccomp wikiPageWikiLink Category:Linux_kernel_features.
- Seccomp wikiPageWikiLink Chrome_OS.
- Seccomp wikiPageWikiLink Cjdns.
- Seccomp wikiPageWikiLink Computer_security.
- Seccomp wikiPageWikiLink File_descriptor.
- Seccomp wikiPageWikiLink Firefox.
- Seccomp wikiPageWikiLink Firefox_OS.
- Seccomp wikiPageWikiLink GNU_General_Public_License.
- Seccomp wikiPageWikiLink Google_Chrome.
- Seccomp wikiPageWikiLink Grid_computing.
- Seccomp wikiPageWikiLink LWN.net.
- Seccomp wikiPageWikiLink Linus_Torvalds.
- Seccomp wikiPageWikiLink Linux.
- Seccomp wikiPageWikiLink Linux_kernel.
- Seccomp wikiPageWikiLink OpenSSH.
- Seccomp wikiPageWikiLink Process_(computing).
- Seccomp wikiPageWikiLink Sandbox_(computer_security).
- Seccomp wikiPageWikiLink System_call.
- Seccomp wikiPageWikiLink Time_Stamp_Counter.
- Seccomp wikiPageWikiLink Tor_(anonymity_network).
- Seccomp wikiPageWikiLink Unix_signal.
- Seccomp wikiPageWikiLink Virtual_machine.
- Seccomp wikiPageWikiLink Vsftpd.
- Seccomp wikiPageWikiLink X86.
- Seccomp wikiPageWikiLinkText "Seccomp#MBOX".
- Seccomp wikiPageWikiLinkText "Secure Computing Mode (seccomp)".
- Seccomp wikiPageWikiLinkText "seccomp sandboxing mode".
- Seccomp wikiPageWikiLinkText "seccomp".
- Seccomp author "Andrea Arcangeli".
- Seccomp genre Sandbox_(computer_security).
- Seccomp license GNU_General_Public_License.
- Seccomp name "seccomp".
- Seccomp operatingSystem Linux.
- Seccomp programmingLanguage C_(programming_language).
- Seccomp status "mainlined".
- Seccomp title "seccomp".
- Seccomp wikiPageUsesTemplate Template:Clarify.
- Seccomp wikiPageUsesTemplate Template:Infobox_software.
- Seccomp wikiPageUsesTemplate Template:Linux.
- Seccomp wikiPageUsesTemplate Template:Linux-stub.
- Seccomp wikiPageUsesTemplate Template:Linux_kernel.
- Seccomp wikiPageUsesTemplate Template:Lowercase_title.
- Seccomp wikiPageUsesTemplate Template:Man.
- Seccomp wikiPageUsesTemplate Template:Official_website.
- Seccomp wikiPageUsesTemplate Template:Reflist.
- Seccomp wikiPageUsesTemplate Template:Start_date_and_age.
- Seccomp wikiPageUsesTemplate Template:URL.
- Seccomp wikiPageUsesTemplate Template:Update.
- Seccomp subject Category:Computer_security.
- Seccomp subject Category:Linux_kernel_features.
- Seccomp hypernym Facility.
- Seccomp type ArchitecturalStructure.
- Seccomp type Area.
- Seccomp type Software.
- Seccomp type Work.
- Seccomp type Area.
- Seccomp type CreativeWork.
- Seccomp type Thing.
- Seccomp type Q386724.
- Seccomp type Q7397.
- Seccomp comment "seccomp (short for secure computing mode) is a computer security facility that provides an application sandboxing mechanism in the Linux kernel; it was merged into the Linux kernel mainline in kernel version 2.6.12, which was released on March 8, 2005. seccomp allows a process to make a one-way transition into a \"secure\" state where it cannot make any system calls except exit(), sigreturn(), read() and write() to already-open file descriptors.".
- Seccomp label "Seccomp".
- Seccomp sameAs Q7442878.
- Seccomp sameAs m.07gsx0.
- Seccomp sameAs Q7442878.
- Seccomp wasDerivedFrom Seccomp?oldid=703581968.
- Seccomp homepage overview.
- Seccomp isPrimaryTopicOf Seccomp.
- Seccomp name "seccomp".