seccompbpf

This article explores the `firejail` sandboxing tool which enhances Linux security by restricting script syscalls using Linux namespaces and seccomp technology. It explains how restricted syscalls either kill the process or fail, illustrating with a script limited to benign system calls and demonstrating syscall blocking in action.