Unverified50% confidenceSolutionExact time
使用 Linux 的 seccomp 限制系统调用范围、通过 AppArmor/SELinux 配置强制访问控制策略可用于落地最小权限原则
1
Sources
50%
Confidence
Long-term
Relevance
7/14/2026
First Seen
Sources
Grok越权上传用户目录：AI Agent权限边界的安全警示
Related Claims
Cite This Claim
Stable URI
https://kongchang.com/claim/507752API
curl https://kongchang.com/api/v1/knowledge/claims/507752MCP
get_claim(id=507752)