Linux Secure Computing (Seccomp) Training

Course code: M7D-SECCOMP01

PDF icon Download Linux Secure Computing (Seccomp) course description (PDF)

Course overview

This course provides a thorough introduction to the Linux secure computing (seccomp) facility, a mechanism that can used to sandbox applications by limiting the set of system calls that they may perform. Seccomp one of the components used in a range of modern applications, including container frameworks, sandboxing technologies, and systemd. Detailed presentations coupled with carefully designed practical exercises provide participants with an understanding of secomp and the knowledge to build and troubleshoot applications that use seccomp.

Related courses

If you are interested in this course, you might also be interested in the following longer courses which cover a number of related topics, including capabilities, namespaces, and control groups (cgroups):

Course details

Course outline.

The course employs a lecture+lab format.

Audience and prerequisites

The primary audience comprises designers, programmers, and systems administrators who are building, administering, or troubleshooting applications that employ seccomp.

In order to get the most out of the course, participants should have a knowledge of basic UNIX/Linux shell commands.

Lab sessions

A significant part of the course is spent on practical exercises. The lab sessions also provide participants with the opportunity to obtain one-to-one assistance from the trainer on the course material and exercises.

Course materials

Course participants will receive course books that include all of the slides and exercises presented in the course.

The course book has been developed by the trainer, and is constantly updated based on ongoing changes in the Linux kernel, as well as practical teaching experience in courses. The course book is produced on demand for each course, in order to ensure that it is completely up to date with current Linux developments.

In addition to the course book, participants will receive a copy of The Linux Programming Interface, in ebook form.

The following samples give some idea of the course content and style of the course materials:

Onsite courses

For onsite courses at your location, please email training@man7.org regarding availability and pricing.

Public courses: upcoming dates and pricing

Date Location Maximum participants
12 November 2021 (Friday) Online: UTC+1 timezone (CET) 14 Registration
10 December 2021 (Friday) Online: UTC-5 timezone (CET) 14 Registration
25 March 2022
(Friday)
Online: UTC-4 timezone;
either (TBD) 09:00-18:00 EDT or 10:00-19:00 EDT
14 Registration

For public online courses, the per-attendee price is €700 reduced to €650 when booked (and either paid or a company purchase order is supplied) at least 4 weeks before the start of the course. (In addition, German VAT is charged for participants attending from German locations; for attendees elsewhere in the European Union, VAT may be payable locally.)

For public in-person courses in Munich, GERMANY, the per-attendee price is €700 + 19% German VAT (MWSt).

The course price includes the cost of training materials as well as lunch and refreshments. Discounts are available for multiple attendees from the same company or organization; please inquire at training@man7.org for details.

About the trainer

Michael Kerrisk has a unique set of qualifications and experience that ensure that course participants receive training of a very high standard: Michael Kerrisk

For more information about the trainer, as well as many reasons why you might want to consider choosing man7.org training courses, please see reasons to choose man7.org training,

Contact

For further inquiries about the course, please contact us via one of the following methods:

Mailing list

If you would like to be added to a mailing list to receive notifications of public training courses that are scheduled in the future, send a mail (noting your location) to training@man7.org. Likely future locations are Europe and USA West Coast, but other locations may also be possible, especially if they can be scheduled to coincide with an interesting conference.