SECCOM

SECCOM — Stands for secure computing.

It’s a mechanism to restrict system calls that a process may make.

• Reduces attack surface of kernel.
• A key component for building application sandboxes.