macOS
Homebrewverified · 100%
brew install libseccompprovider-native install command
brew / rank 747
Install libseccomp with Homebrew
Interface to the Linux Kernel's syscall filtering mechanism. Version 2.6.1 via Homebrew; verified from local package data.
install
Additional install commands
overview
Package summary
Interface to the Linux Kernel's syscall filtering mechanism
Project links
Commands and aliases
- scmp_sys_resolver
history
Project history and usage
libseccomp is the userspace helper library for Linux seccomp syscall filtering. It gives applications and container runtimes a portable API for generating BPF-based syscall filters instead of hand-writing architecture-specific filter programs.
Project history
The Linux kernel documentation frames seccomp filtering as a way for a process to reduce exposed kernel syscall surface by installing a BPF program over syscall metadata. The libseccomp README describes the library as an easy-to-use, platform-independent interface to that filtering mechanism, abstracting the BPF language behind a conventional function-call API.
The libseccomp tag history shows v0.1.0 and v1.0.0 tags in January 2013, followed by a long 2.x series. The README also documents architecture support, manpage-based documentation, regression tests, release signing, and Go bindings in the separate libseccomp-golang repository.
Adoption history
libseccomp became important because seccomp-BPF moved from a kernel primitive into ordinary application sandboxing and container security workflows. Its supported-architecture list and release process reflect use by distributions and runtimes that need consistent syscall-filter generation across Linux ABIs.
How it is used
Applications initialize a filter context, add syscall rules, load the resulting filter into the kernel, and optionally use tools such as scmp_sys_resolver while developing policies. The library docs emphasize tests that can run even on systems without seccomp-BPF, plus live tests for systems with kernel support.
Why package nerds care
libseccomp is one of those packages whose installed files look small but whose consequences are large: container profiles, browser sandboxes, service hardening, and low-level Linux security tooling all prefer a stable API over handwritten BPF filters.
Timeline
- 2013: v0.1.0 and v1.0.0 tags were made in January.
- 2015: v2.2.x releases expanded the 2.x line.
- 2019: v2.4.0 was published in March.
- 2020: v2.5.0 was published in July.
- 2025: v2.6.0 was published in January.
Related projects
- Related projects include the Linux kernel seccomp-BPF interface, libseccomp-golang, container runtimes, browser sandboxes, and Linux service-hardening tools.
Sources
security posture
Risk level: green
library-like package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- library-like package without higher-risk signals
Signals
- metadata:library-like
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
scmp_sys_resolver | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version2.6.1
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:libseccomp |
|---|---|
| Version | 2.6.1 |
| Package manager | Homebrew |
| Homepage | https://github.com/seccomp/libseccomp |
| Repository | https://github.com/seccomp/libseccomp |
| Bottle | not recorded |
| Service | none declared |
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- curated package history
- pkgdb category and tag curation