Privilege Escalation
Premium
Bypassing seccomp
seccomp is a tiny program the kernel runs before every syscall — it looks at the number, the architecture and the arguments, then votes allow or die. It is genuinely strong. Almost every time it fails, it fails the same way: someone wrote down the syscalls they were afraid of instead of the ones they meant to permit.
Members Only Content
This article is exclusively available to premium members of LazyHackers. Login or subscribe to read.
