What is seccomp?
Answer in brief
A Linux kernel feature that restricts which system calls a process may make.
seccomp in agent sandboxes
seccomp (secure computing mode) filters let a runtime block dangerous system calls. Docker applies a default seccomp profile to containers. It reduces attack surface but is a filter, not a separate kernel, so it is usually one layer among several in an agent sandbox.
Cite this page
Agent Sandboxes. (2026). What is seccomp?. agentsandboxes.org. Last reviewed November 8, 2026. https://agentsandboxes.org/glossary/seccomp/
Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.