Playing in the Sandbox: A Study on the Usability of Seccomp

2025/06/11 by Alhindi, Maysara, Hallett, Joseph · 1 citation
#FOS: Computer and information sciences #Operating Systems (cs.OS) #Software Engineering (cs.SE)

paper · doi:10.48550/arxiv.2506.10234

Abstract

Sandboxing restricts what applications do, and prevents exploited processes being abused; yet relatively few applications get sandboxed: why? We report a usability trial with 7 experienced Seccomp developers exploring how they approached sandboxing an application and the difficulties they faced. The developers each approached sandboxing the application differently and each came to different solutions. We highlight many challenges of using Seccomp, the sandboxing designs by the participants, and what developers think would make it easier for them to sandbox applications effectively.

Cited by

• A Survey of Inductive Reasoning for Large Language Models

Related

• Sandboxing Adoption in Open Source Ecosystems
• Sandboxing: Foolproof Boundaries vs. Unbounded Foolishness
• Threadbox: Sandboxing for Modular Security
• SoK: An Essential Guide For Using Malware Sandboxes In Security Applications: Challenges, Pitfalls, and Lessons Learned
• Systematic Evaluation of Sandboxed Software Deployment for Real-time Software on the Example of a Self-Driving Heavy Vehicle