thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Seccomp

A Linux kernel feature that restricts which system calls a process may make, reducing kernel attack surface for containers.

Definition

Seccomp profiles allowlist permitted syscalls; Docker applies a default profile, and Kubernetes can enforce RuntimeDefault through the pod security context. Restricting syscalls limits what an attacker can do after compromising a container.

Example

Setting seccompProfile type RuntimeDefault for all pods in a namespace.

Exam tip

Seccomp filters syscalls; AppArmor and SELinux control file and resource access.

Related terms