Abstract
This talk introduces a method to enhancing the security of software projects by seamlessly integrating Seccomp profile generation into the test pipeline. This methodology emphasizes comprehensive test coverage of the application, encompassing both integration and unit tests.
By leveraging tracing tools such as perf, strace, and the newly developed Harpoon, developers can automate the extraction of system calls from tested functions. Harpoon, a personal project designed specifically for this purpose, offers a unique capability to trace system calls from user-space functions.
By focusing on extensive test coverage and leveraging tracing tools, developers can ensure robust protection against vulnerabilities without compromising development efficiency.
