macOS
Homebrew已验证 · 100%
brew install libseccompprovider-native install command
安装
其他安装命令
概览
软件包摘要
Interface to the Linux Kernel's syscall filtering mechanism
项目链接
命令和别名
- scmp_sys_resolver
历史
项目历史与用法
libseccomp is the userspace helper library for Linux seccomp syscall filtering. It gives applications and container runtimes a portable API for generating BPF-based syscall filters instead of hand-writing architecture-specific filter programs.
项目历史
The Linux kernel documentation frames seccomp filtering as a way for a process to reduce exposed kernel syscall surface by installing a BPF program over syscall metadata. The libseccomp README describes the library as an easy-to-use, platform-independent interface to that filtering mechanism, abstracting the BPF language behind a conventional function-call API.
The libseccomp tag history shows v0.1.0 and v1.0.0 tags in January 2013, followed by a long 2.x series. The README also documents architecture support, manpage-based documentation, regression tests, release signing, and Go bindings in the separate libseccomp-golang repository.
采用历史
libseccomp became important because seccomp-BPF moved from a kernel primitive into ordinary application sandboxing and container security workflows. Its supported-architecture list and release process reflect use by distributions and runtimes that need consistent syscall-filter generation across Linux ABIs.
使用方式
Applications initialize a filter context, add syscall rules, load the resulting filter into the kernel, and optionally use tools such as scmp_sys_resolver while developing policies. The library docs emphasize tests that can run even on systems without seccomp-BPF, plus live tests for systems with kernel support.
为什么软件包爱好者会关心
libseccomp is one of those packages whose installed files look small but whose consequences are large: container profiles, browser sandboxes, service hardening, and low-level Linux security tooling all prefer a stable API over handwritten BPF filters.
时间线
- 2013: v0.1.0 and v1.0.0 tags were made in January.
- 2015: v2.2.x releases expanded the 2.x line.
- 2019: v2.4.0 was published in March.
- 2020: v2.5.0 was published in July.
- 2025: v2.6.0 was published in January.
Related projects
- Related projects include the Linux kernel seccomp-BPF interface, libseccomp-golang, container runtimes, browser sandboxes, and Linux service-hardening tools.
来源
安全态势
风险级别：绿色
library-like package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- library-like package without higher-risk signals
信号
- metadata:library-like
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
scmp_sys_resolver | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本2.6.1
管理器更新时间
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:libseccomp |
|---|---|
| 版本 | 2.6.1 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/seccomp/libseccomp |
| 仓库 | https://github.com/seccomp/libseccomp |
| Bottle | 未记录 |
| 服务 | 未声明 |
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- curated package history
- pkgdb category and tag curation