SYD(1) General Commands Manual SYD(1) (NAME) syd - seccomp (SYNOPSIS) syd [-acefhlmpqtxEPV] [--] {command [arg...]} syd --api syd --check syd --el syd --sh (DESCRIPTION) Syd seccomp(2) 5.19 . (root) . Syd x86 x86_64 x32 armv7 aarch64 loongarch64 mips mips64 mips64el ppc ppc64 ppc64le riscv64 s390x . Syd : o Bind Mounts: (mount namespace) (VFS) read-only nodev noexec nosuid nosymfollow . o Landlock: - . o seccomp-bpf: Secure Computing . o seccomp-notify: (fallback) . CIDR EACCES (TOCTOU) . Syd pidfd_getfd(2) pidfd_send_signal(2) SECCOMP_USER_NOTIF_FLAG_CONTINUE Secure Computing CONFIG_CROSS_MEMORY_ATTACH . Syd seccomp SECCOMP_IOCTL_NOTIF_ADDFD . Syd SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV . 5.19 Landlock Syd CONFIG_LSM_LANDLOCK Landlock ABI 3 syd-lock(1) . CONFIG_KCMP CONFIG_UNIX_DIAG . Syd . SECURITY syd(7) trace/allow_unsafe_* . (OPTIONS) : -h, --help . -V, --version . -C, --check . -v, --verbose log/verbose. -c (login shell) user . /bin/sh . SYD_SHELL . -f . Syd user . -l, --login Syd user . -q (quick boot) . . SYD_QUICK_BOOT . -x trace ("dry run"). Syd . . pandora(1) Syd . -m config (init) . -p name . -P path . -a alias (alias) . argv[0] . -e -e var=val var=val . -e var var . -e var= . -t timeout . timeout syd(2) . -E mode (export) Secure Computing . (mode) bpf pfc : bpf Berkeley Packet Filter pfc Pseudo Filter Code . --api API syd(2) JSON. . /dev/syd . --el syd.el Emacs Lisp stat(2) Syd . /dev/syd.el . --sh esyd . /dev/syd.sh . POSIX sh bash zsh . eval "$(syd --sh)" . (INVOCATION) Syd . . syd(2) API . IPC ipc Syd . syd(2) . (ENVIRONMENT) SYD_IPC . ipc syd(2) . ipc . SYD_LOG emerg alert crit error warn notice info debug. SYD_LOG_BUF_LEN syslog(2). (stack) 256k . Syd (heap) . parse-size . . SYD_LOG_FD stderr(3) . . Syd EBADF (" ") . SYD_PDS PR_SET_PDEATHSIG(2const) . SYD_PID_FN pid Syd . . SYD_NPROC . . SYD_NPROC_MAX usize::MAX . SYD_NPROC . SYD_CHDIR . . SYD_COMPAT_SOCKET socketcall(2). libc 4.3 . trace/allow_unsafe_socketcall:1 . SYD_SHELL . . /usr/bin/bash --login --noprofile --norc --restricted . SYD_DUMP_SCMP Secure Computing -E . SYD_SKIP_SCMP seccomp(2) Syd. . Syd RUST_BACKTRACE . Syd trusted . SYD_SKIP_NAME Syd . Syd trusted . SYD_FORCE_NO_UNIX_DIAG CONFIG_UNIX_DIAG. . Syd trusted . SYD_FORCE_NO_SYMLINKS RESOLVE_NO_SYMLINKS open(2). trace/force_no_symlinks:1 . SYD_FORCE_NO_MAGICLINKS RESOLVE_NO_MAGICLINKS open(2). trace/force_no_magiclinks:1 . SYD_FORCE_NO_XDEV RESOLVE_NO_XDEV open(2). trace/force_no_xdev:1 . SYD_FORCE_CLOEXEC (close-on-exec) . trace/force_cloexec:1 . SYD_FORCE_RAND_FD fd. trace/force_rand_fd:1 . kcmp(2) . SYD_FORCE_RO_OPEN open(2). trace/force_ro_open:1 . SYD_FORCE_WX_OPEN open(2) . trace/force_wx_open:1 . SYD_FORCE_LOCAL_NET loopback bind/connect. trace/force_local_net:1 . SYD_FORCE_TTY TTY JSON (pretty-printed) . SYD_QUIET_TTY TTY JSON . SYD_PROXY_HOST proxy/ext/host (hostname) IP Syd (resolve) IP . SYD_PROXY_PORT proxy/ext/port. SYD_PROXY_UNIX proxy/ext/unix proxy/ext/host . SYD_QUICK_BOOT Syd : ! syd(1) syd-oci(1) Exherbo Linux cave-generate-metadata(1) . Syd trusted . SYD_RLIMIT_AS rlimit/as. SYD_RLIMIT_CORE rlimit/core. SYD_RLIMIT_DATA rlimit/data. SYD_RLIMIT_FSIZE rlimit/fsize. SYD_RLIMIT_MEMLOCK rlimit/memlock. SYD_RLIMIT_NICE rlimit/nice. SYD_RLIMIT_NOFILE rlimit/nofile. SYD_RLIMIT_NPROC rlimit/nproc. SYD_RLIMIT_RTPRIO rlimit/rtprio. SYD_RLIMIT_RTTIME rlimit/rttime. SYD_RLIMIT_SIGPENDING rlimit/sigpending. SYD_RLIMIT_STACK rlimit/stack. SYD_TMOUT timeout. SYD_NO_CROSS_MEMORY_ATTACH (cross memory attach) proc_pid_mem(5). SYD_PROC_PID_MEM_FALLBACK Syd . process_vm_readv(2) process_vm_writev(2) ENOSYS Syd proc_pid_mem(5) . SYD_NO_CROSS_MEMORY_ATTACH . SYD_ASSUME_KERNEL uname(2) . Syd (major) (minor) uname(2) . (micro) Syd . Syd "trusted" . SYD_PALUDIS_LPATH sandbox/lpath paludis (off). SYD_PALUDIS_NPATH sandbox/npath paludis (off). SYD_PALUDIS_LIST sandbox/list paludis (off). SYD_PALUDIS_WALK sandbox/walk paludis (off). SYD_PALUDIS_IOCTL sandbox/ioctl paludis (off). SYD_PALUDIS_PASSFD sandbox/passfd paludis (off). SYD_USER_LPATH sandbox/lpath user (on). (LOGGING) : emerg alert crit error warn notice info debug . SYD_LOG . stderr(3) SYD_LOG_FD . Syd JSON . : +-----+-----------------------------------+ |KEY | DESCRIPTION | +-----+-----------------------------------+ |id | | | | | | | | | | | | | | | | . | +-----+-----------------------------------+ |ctx | (Context) | | | | | | access | | | safesetid segvguard | | | . | +-----+-----------------------------------+ |cap | | | | | +-----+-----------------------------------+ |act | | | | : allow | | | warn deny panic stop | | | abort kill exit | +-----+-----------------------------------+ |pid | | | | | +-----+-----------------------------------+ |path | | | | | | | | | | | +-----+-----------------------------------+ |addr | | | | | | | | | | | | | 127.0.0.1!22 | +-----+-----------------------------------+ |unix | | | | | | | | | | | | | | +-----+-----------------------------------+ |ipv | IP | | | | | | addr ( ) | +-----+-----------------------------------+ |abs | | | | | | | unix | | | | | | | | | | | | True | +-----+-----------------------------------+ |sys | | | | | | | | +-----+-----------------------------------+ |arch | | | | | | | | +-----+-----------------------------------+ |args | | | | | | | | +-----+-----------------------------------+ |cmd | | | | | | | | | | | | | TTY | | | log | | | | +-----+-----------------------------------+ |cwd | | | | | | | | | | | +-----+-----------------------------------+ |uid | | +-----+-----------------------------------+ |time | | | | | | | | | | ISO8601 | | | YYYYMMDDThhmmssZ | +-----+-----------------------------------+ | | | | | | | | | | | | | | ISO8601 | | | | | | . | +-----+-----------------------------------+ | | | | | | | | | | | | | | | | | | | | . | +-----+-----------------------------------+ |err | | +-----+-----------------------------------+ |msg | | | | | +-----+-----------------------------------+ |tip | | | | | | | | | | Syd | +-----+-----------------------------------+ (EXIT STATUS) Syd . Syd . Syd errno(3) . Syd (panic) . Syd (allocator) . Syd . (SEE ALSO) syd(2), syd(5), syd(7), syd-lock(1), syd-ls(1), syd-mdwe(1), syd-ring(1), sydtutorial(7) o syd: https://sydbox.exherbo.org o libsyd: https://libsyd.exherbo.org o pandora: https://lib.rs/pandora_box o paludis: http://paludis.exherbo.org o Landlock: https://landlock.io (AUTHORS) Ali Polatel. https://gitlab.exherbo.org/sydbox/sydbox.git Radicle rad:z38HCnbmcDegA2BMxuPaPRPMdp6wF . https://gitlab.exherbo.org/groups/sydbox/-/issues . #sydbox Libera Chat #sydbox:mailstation.de Matrix. 2026-09-01 SYD(1)