Sandboxing is a security mechanism for separating running programs, usually in an effort to mitigate system failures or software vulnerabilities from spreading. It is often used to execute untested or untrusted programs or code, possibly from unverified third parties, suppliers, users or websites, without risking harm to the host machine or operating system.
This module covers techniques to escape various sandboxing implementations, including chroot jails and seccomp filters.