Linux Security Beyond Root: Understanding Syscalls, Capabilities, Namespaces and eBPF

The classic Linux security model is easy to explain: user → process → root It is also no longer enough to understand how modern Linux workloads are isolated. A production application can run without