macOS
brew install libseccomplocal Homebrew formula metadata
brew
Interface to the Linux Kernel's syscall filtering mechanism. Version 2.6.1 via Homebrew; verified 2026-07-01.
install
brew install libseccomplocal Homebrew formula metadata
sudo apk add libseccompAlpine Linux edge package indexes · libseccomp · source: dl-cdn.alpinelinux.org
sudo apt install libseccomp-devDebian stable package indexes · libseccomp-dev · source: deb.debian.org
sudo dnf install libseccompFedora Rawhide package metadata · libseccomp · source: dl.fedoraproject.org
nix profile install nixpkgs#libseccompnixpkgs package indexes · pkgs/by-name/li/libseccomp/package.nix · source: api.github.com
sudo pacman -S libseccompArch Linux sync databases · libseccomp · source: geo.mirror.pkgbuild.com
sudo zypper install libseccomp-developenSUSE Tumbleweed package metadata · libseccomp-devel · source: download.opensuse.org
overview
Interface to the Linux Kernel's syscall filtering mechanism
history
libseccomp is the userspace helper library for Linux seccomp syscall filtering. It gives applications and container runtimes a portable API for generating BPF-based syscall filters instead of hand-writing architecture-specific filter programs.
The Linux kernel documentation frames seccomp filtering as a way for a process to reduce exposed kernel syscall surface by installing a BPF program over syscall metadata. The libseccomp README describes the library as an easy-to-use, platform-independent interface to that filtering mechanism, abstracting the BPF language behind a conventional function-call API.
The libseccomp tag history shows v0.1.0 and v1.0.0 tags in January 2013, followed by a long 2.x series. The README also documents architecture support, manpage-based documentation, regression tests, release signing, and Go bindings in the separate libseccomp-golang repository.
libseccomp became important because seccomp-BPF moved from a kernel primitive into ordinary application sandboxing and container security workflows. Its supported-architecture list and release process reflect use by distributions and runtimes that need consistent syscall-filter generation across Linux ABIs.
Applications initialize a filter context, add syscall rules, load the resulting filter into the kernel, and optionally use tools such as scmp_sys_resolver while developing policies. The library docs emphasize tests that can run even on systems without seccomp-BPF, plus live tests for systems with kernel support.
libseccomp is one of those packages whose installed files look small but whose consequences are large: container profiles, browser sandboxes, service hardening, and low-level Linux security tooling all prefer a stable API over handwritten BPF filters.
security posture
library-like package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
scmp_sys_resolver | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/seccomp/libseccomp
install metadata
| Package key | brew:libseccomp |
|---|---|
| Version | 2.6.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/libseccomp |
| Homepage | https://github.com/seccomp/libseccomp |
| Repository | https://github.com/seccomp/libseccomp |
| Upstream docs | https://github.com/seccomp/libseccomp#readme |
| License | LGPL-2.1-only |
| Source archive | https://github.com/seccomp/libseccomp/releases/download/v2.6.1/libseccomp-2.6.1.tar.gz |
| Last updated | 2026-07-01T21:39:23Z |
| Pulse | updated |
| Build dependencies | gperf |
| Bottle | available (on arm64_linux, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | libseccomp |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Requirements |
|
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
libseccomp-dev 2.6.0-2
high level interface to Linux seccomp filter (development files)
https://github.com/seccomp/libseccomp
sudo apt install libseccomp-devlibseccomp2 2.6.0-2
high level interface to Linux seccomp filter
https://github.com/seccomp/libseccomp
sudo apt install libseccomp2python3-seccomp 2.6.0-2
high level interface to Linux seccomp filter (Python 3 bindings)
https://github.com/seccomp/libseccomp
sudo apt install python3-seccompseccomp 2.6.0-2
helper tools for high level interface to Linux seccomp filter
https://github.com/seccomp/libseccomp
sudo apt install seccomplibseccomp
nix profile install nixpkgs#libseccomplibseccomp-dev 2.5.5-1ubuntu3
high level interface to Linux seccomp filter (development files)
https://github.com/seccomp/libseccomp
sudo apt install libseccomp-devlibseccomp2 2.5.5-1ubuntu3
high level interface to Linux seccomp filter
https://github.com/seccomp/libseccomp
sudo apt install libseccomp2python3-seccomp 2.5.5-1ubuntu3
high level interface to Linux seccomp filter (Python 3 bindings)
https://github.com/seccomp/libseccomp
sudo apt install python3-seccompseccomp 2.5.5-1ubuntu3
helper tools for high level interface to Linux seccomp filter
https://github.com/seccomp/libseccomp
sudo apt install seccomplibseccomp 2.6.0-r2
interface to the Linux Kernel's syscall filtering mechanism
https://github.com/seccomp/libseccomp
sudo apk add libseccomplibseccomp-dev 2.6.0-r2
interface to the Linux Kernel's syscall filtering mechanism (development files)
https://github.com/seccomp/libseccomp
sudo apk add libseccomp-devlibseccomp-doc 2.6.0-r2
interface to the Linux Kernel's syscall filtering mechanism (documentation)
https://github.com/seccomp/libseccomp
sudo apk add libseccomp-doclibseccomp-static 2.6.0-r2
interface to the Linux Kernel's syscall filtering mechanism (static library)
https://github.com/seccomp/libseccomp
sudo apk add libseccomp-staticpy3-libseccomp 2.6.0-r2
Python 3 bindings for libseccomp
https://github.com/seccomp/libseccomp
sudo apk add py3-libseccomplibseccomp 2.6.0-3.fc44
Enhanced seccomp library
https://github.com/seccomp/libseccomp
sudo dnf install libseccomplibseccomp-devel 2.6.0-3.fc44
Development files used to build applications with libseccomp support
https://github.com/seccomp/libseccomp
sudo dnf install libseccomp-develsource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.