Kernel on Ethan-ZYFhttps://ethanzyf.com/tags/kernel/Recent content in Kernel on Ethan-ZYFHugoen-usWed, 13 May 2026 00:00:00 -0700Day 3: seccomp Basics + Strict Modehttps://ethanzyf.com/blog/day3-seccomp-strict/Wed, 13 May 2026 00:00:00 -0700https://ethanzyf.com/blog/day3-seccomp-strict/<p>How <code>seccomp</code> intercepts syscalls at the kernel entry, what <code>SECCOMP_MODE_STRICT</code> actually allows (and the <code>_exit()</code> trap that fools nearly everyone), plus the design philosophy that filter mode inherits: monotonic, irrevocable security state.</p>Day 1: Linux Syscall Internalshttps://ethanzyf.com/blog/day1-syscalls/Mon, 11 May 2026 00:30:00 -0700https://ethanzyf.com/blog/day1-syscalls/<p>A deep dive into how Linux system calls actually work on x86_64: the ABI, the <code>syscall</code> instruction&rsquo;s hardware side effects, the full user→kernel path, and a categorized cheat sheet of the syscalls worth knowing.</p>