How the XZ backdoor works

> The backdoor also includes code that patches the binary of sshd itself to disable seccomp() and prevent the program from creating a chroot sandbox for its children.

I don't think that's accurate though. If that is referring to "https://gist.github.com/smx-smx/a6112d54777845d389bd7126d..." - the binary patch was done by the gist authors to be able to trace the `sshd` process using Frida and not by the backdoor. They probably binary-patched it to avoid recompiling.