# The Seccomp Notifier - New Frontiers in Unprivileged Container Development

DevFeed: [The Seccomp Notifier - New Frontiers in Unprivileged Container Development](<https://devfeed.tech/articles/the-seccomp-notifier-new-frontiers-in-unprivileged-container-development-33951.md>)

Original publisher: [Read original article](<https://brauner.io/2020/07/23/seccomp-notify.html>)

Author: Christian Brauner

Published: 2020-07-22T22:00:00Z

Content type: article

Language: en

Sources: [Personal blog of Christian Brauner](<https://devfeed.tech/sources/personal-blog-of-christian-brauner.md>)

Topics: [Linux Kernel](<https://devfeed.tech/topics/linux-kernel.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Development](<https://devfeed.tech/topics/development.md>)

Tags: [containers](<https://devfeed.tech/tags/containers.md>), [development](<https://devfeed.tech/tags/development.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux-kernel](<https://devfeed.tech/tags/linux-kernel.md>), [technical](<https://devfeed.tech/tags/technical.md>)

## AI overview

This article examines the Linux seccomp notify feature, its kernel and userspace development, and the new possibilities it enables for unprivileged containers. It also explains how Linux namespaces contribute to container isolation and why privilege checks can behave differently inside user namespaces.

## Source excerpt

Introduction