seccomp

Documentation

Index

• func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp
• func WithDefaultProfile() oci.SpecOpts
• func WithProfile(profile string) oci.SpecOpts

Functions

func DefaultProfile

func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp

DefaultProfile defines the allowed syscalls for the default seccomp profile.

func WithDefaultProfile

func WithDefaultProfile() oci.SpecOpts

WithDefaultProfile sets the default seccomp profile to the spec. Note: must follow the setting of process capabilities

func WithProfile

func WithProfile(profile string) oci.SpecOpts

WithProfile receives the name of a file stored on disk comprising a json formatted seccomp profile, as specified by the opencontainers/runtime-spec. The profile is read from the file, unmarshaled, and set to the spec.