Seccomp filters on the Ubuntu Phone
The officially-supported Ubuntu Phones run pretty old kernels. The Nexus 4 and BQ phones all run v3.4, and the Meizu MX4 runs v3.10. Device kernels typically lag a bit behind since so much effort goes into making them compatible with the hardware, but this posed a bit of a complication since the Click confinement model utilizes features of AppArmor v3, which isn’t even released yet. However, we like to push the envelope here at Canonical, so we backported it into our phone kernels anyway....