seccomp is a really exciting feature that I haven't seen talked about too often. It actually played a fairly large role in CTFs this year, being used by LegitB

seccomp is a really exciting feature that I haven't seen talked about too often. It actually played a fairly large role in CTFs this year, being used by LegitBS in the DEFCON Finals. Since we didn't have access to a lot of the syscalls we'd need to achieve persistence, we (and a lot of other teams), had to focus on actually solving the problems, instead of on sidestepping them with cheap tactics.