Answer
Seccomp filters syscalls; AppArmor/SELinux enforce filesystem and process restrictions.
Quick Answer
Seccomp filters system calls at the kernel level — it blocks specific syscalls entirely (like ptrace, keyctl) before they reach the kernel. AppArmor restricts what filesystem paths and network operations a process can perform. SELinux uses mandatory type enforcement on all resources. They're complementary — seccomp limits syscalls, AppArmor/SELinux limit resource access.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ