# Install libseccomp with Homebrew, apk, apt, dnf, Nix, pacman, zypper

Interface to the Linux Kernel's syscall filtering mechanism. Version 2.6.1 via Homebrew; verified 2026-07-01.

## Install

```sh
sudo av install brew:libseccomp
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install libseccomp
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add libseccomp
```

  Evidence: Alpine Linux edge package indexes: libseccomp from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install libseccomp-dev
```

  Evidence: Debian stable package indexes: libseccomp-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install libseccomp
```

  Evidence: Fedora Rawhide package metadata: libseccomp from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#libseccomp
```

  Evidence: nixpkgs package indexes: pkgs/by-name/li/libseccomp/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S libseccomp
```

  Evidence: Arch Linux sync databases: libseccomp from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- zypper (92%):

```sh
sudo zypper install libseccomp-devel
```

  Evidence: openSUSE Tumbleweed package metadata: libseccomp-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

## Package facts

- **Package key:** brew:libseccomp
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/libseccomp>
- **Version:** 2.6.1
- **Source summary:** Interface to the Linux Kernel's syscall filtering mechanism
- **Homepage:** <https://github.com/seccomp/libseccomp>
- **Repository:** <https://github.com/seccomp/libseccomp>
- **Upstream docs:** <https://github.com/seccomp/libseccomp#readme>
- **License:** LGPL-2.1-only
- **Source archive:** <https://github.com/seccomp/libseccomp/releases/download/v2.6.1/libseccomp-2.6.1.tar.gz>
- **Last updated:** 2026-07-01T21:39:23Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- scmp_sys_resolver (cli)
- scmp_sys_resolver (alias)

## Build dependencies

- gperf

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.6.1
- Package-manager updated: 2026-07-01
- Local data: ok
- Upstream repository: https://github.com/seccomp/libseccomp
- info: No cached GitHub release or tag data was available.
## Project history and usage

libseccomp is the userspace helper library for Linux seccomp syscall filtering. It gives applications and container runtimes a portable API for generating BPF-based syscall filters instead of hand-writing architecture-specific filter programs.

### Project history

The Linux kernel documentation frames seccomp filtering as a way for a process to reduce exposed kernel syscall surface by installing a BPF program over syscall metadata. The libseccomp README describes the library as an easy-to-use, platform-independent interface to that filtering mechanism, abstracting the BPF language behind a conventional function-call API.

The libseccomp tag history shows v0.1.0 and v1.0.0 tags in January 2013, followed by a long 2.x series. The README also documents architecture support, manpage-based documentation, regression tests, release signing, and Go bindings in the separate libseccomp-golang repository.

### Adoption history

libseccomp became important because seccomp-BPF moved from a kernel primitive into ordinary application sandboxing and container security workflows. Its supported-architecture list and release process reflect use by distributions and runtimes that need consistent syscall-filter generation across Linux ABIs.

### How it is used

Applications initialize a filter context, add syscall rules, load the resulting filter into the kernel, and optionally use tools such as scmp_sys_resolver while developing policies. The library docs emphasize tests that can run even on systems without seccomp-BPF, plus live tests for systems with kernel support.

### Why package nerds care

libseccomp is one of those packages whose installed files look small but whose consequences are large: container profiles, browser sandboxes, service hardening, and low-level Linux security tooling all prefer a stable API over handwritten BPF filters.

### Timeline

- 2013: v0.1.0 and v1.0.0 tags were made in January.
- 2015: v2.2.x releases expanded the 2.x line.
- 2019: v2.4.0 was published in March.
- 2020: v2.5.0 was published in July.
- 2025: v2.6.0 was published in January.

### Related projects

- Related projects include the Linux kernel seccomp-BPF interface, libseccomp-golang, container runtimes, browser sandboxes, and Linux service-hardening tools.

### Sources

- <https://api.github.com/repos/seccomp/libseccomp/releases?per_page=100>
- <https://github.com/seccomp/libseccomp>
- <https://github.com/seccomp/libseccomp/tree/main/doc>
- <https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html>


## Security Notes

library-like package without higher-risk signals.

- **Geiger risk:** green / low
- library-like package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** libseccomp
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Requirements:** linux
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Debian apt - libseccomp-dev - 2.6.0-2: normalized package name match | Debian stable package indexes: libseccomp-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | high level interface to Linux seccomp filter (development files) | https://github.com/seccomp/libseccomp
- Debian apt - libseccomp2 - 2.6.0-2: normalized package name match | Debian stable package indexes: libseccomp2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | high level interface to Linux seccomp filter | https://github.com/seccomp/libseccomp
- Debian apt - python3-seccomp - 2.6.0-2: normalized package name match | Debian stable package indexes: python3-seccomp from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | high level interface to Linux seccomp filter (Python 3 bindings) | https://github.com/seccomp/libseccomp
- Debian apt - seccomp - 2.6.0-2: normalized package name match | Debian stable package indexes: seccomp from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | helper tools for high level interface to Linux seccomp filter | https://github.com/seccomp/libseccomp
- Nix - libseccomp: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libseccomp/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - libseccomp-dev - 2.5.5-1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: libseccomp-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | high level interface to Linux seccomp filter (development files) | https://github.com/seccomp/libseccomp
- Ubuntu apt - libseccomp2 - 2.5.5-1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: libseccomp2 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | high level interface to Linux seccomp filter | https://github.com/seccomp/libseccomp
- Ubuntu apt - python3-seccomp - 2.5.5-1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-seccomp from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | high level interface to Linux seccomp filter (Python 3 bindings) | https://github.com/seccomp/libseccomp
- Ubuntu apt - seccomp - 2.5.5-1ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: seccomp from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | helper tools for high level interface to Linux seccomp filter | https://github.com/seccomp/libseccomp
- apk - libseccomp - 2.6.0-r2: normalized package name match | Alpine Linux edge package indexes: libseccomp from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | interface to the Linux Kernel's syscall filtering mechanism | https://github.com/seccomp/libseccomp
- apk - libseccomp-dev - 2.6.0-r2: normalized package name match | Alpine Linux edge package indexes: libseccomp-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | interface to the Linux Kernel's syscall filtering mechanism (development files) | https://github.com/seccomp/libseccomp
- apk - libseccomp-doc - 2.6.0-r2: normalized package name match | Alpine Linux edge package indexes: libseccomp-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | interface to the Linux Kernel's syscall filtering mechanism (documentation) | https://github.com/seccomp/libseccomp
- apk - libseccomp-static - 2.6.0-r2: normalized package name match | Alpine Linux edge package indexes: libseccomp-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | interface to the Linux Kernel's syscall filtering mechanism (static library) | https://github.com/seccomp/libseccomp
- apk - py3-libseccomp - 2.6.0-r2: normalized package name match | Alpine Linux edge package indexes: py3-libseccomp from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Python 3 bindings for libseccomp | https://github.com/seccomp/libseccomp
- dnf - libseccomp - 2.6.0-3.fc44: normalized package name match | Fedora Rawhide package metadata: libseccomp from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Enhanced seccomp library | https://github.com/seccomp/libseccomp
- dnf - libseccomp-devel - 2.6.0-3.fc44: normalized package name match | Fedora Rawhide package metadata: libseccomp-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Development files used to build applications with libseccomp support | https://github.com/seccomp/libseccomp


## Related links

- [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [gperf](https://www.automicvault.com/pkg/brew/gperf/) - Build dependency declared by Homebrew.
- [apptainer](https://www.automicvault.com/pkg/brew/apptainer/) - Popular package that depends on this formula.
- [conmon](https://www.automicvault.com/pkg/brew/conmon/) - Popular package that depends on this formula.
- [crun](https://www.automicvault.com/pkg/brew/crun/) - Popular package that depends on this formula.
- [runc](https://www.automicvault.com/pkg/brew/runc/) - Popular package that depends on this formula.
- [slirp4netns](https://www.automicvault.com/pkg/brew/slirp4netns/) - Popular package that depends on this formula.
- [bubblewrap](https://www.automicvault.com/pkg/brew/bubblewrap/) - Shares av.db curated category or tags: cli, linux, sandboxing, security.
- [jailkit](https://www.automicvault.com/pkg/brew/jailkit/) - Shares av.db curated category or tags: cli, sandboxing, security.
- [landrun](https://www.automicvault.com/pkg/brew/landrun/) - Shares av.db curated category or tags: cli, linux, sandboxing, security.
- [fence](https://www.automicvault.com/pkg/brew/fence/) - Shares av.db curated category or tags: cli, sandboxing, security.
- [nono](https://www.automicvault.com/pkg/brew/nono/) - Shares av.db curated category or tags: cli, sandboxing, security.
- [sandvault](https://www.automicvault.com/pkg/brew/sandvault/) - Shares av.db curated category or tags: cli, sandboxing, security.
- [libcap](https://www.automicvault.com/pkg/brew/libcap/) - Shares av.db curated category or tags: cli, linux, security.
- [libcap-ng](https://www.automicvault.com/pkg/brew/libcap-ng/) - Shares av.db curated category or tags: cli, linux, security.

## Combined YAML source

View the package source record on GitHub. [combined/libseccomp.yml](https://github.com/automic-vault/db/blob/main/combined/libseccomp.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph