0x7000 · Exploitation Techniques
Seccomp Sandboxes and the open-read-write Chain
A seccomp policy that bans execve takes the shell off the table, so attackers switch goals: open the flag, read it, write it back. Build the ORW chain, and see what a tighter policy stops.