seccomp

Documentation

Index

• type SeccompStrategy
  • func NewWithSeccompProfile(allowedProfiles []string) (SeccompStrategy, error)

Types

type SeccompStrategy

type SeccompStrategy interface {
	// Generate creates the profile based on policy rules.
	Generate(pod *api.Pod) (string, error)
	// ValidatePod ensures that the specified values on the pod fall within the range
	// of the strategy.
	ValidatePod(pod *api.Pod) field.ErrorList
	// ValidateContainer ensures that the specified values on the container fall within
	// the range of the strategy.
	ValidateContainer(pod *api.Pod, container *api.Container) field.ErrorList
}

SeccompStrategy defines the interface for all seccomp constraint strategies.

func NewWithSeccompProfile

func NewWithSeccompProfile(allowedProfiles []string) (SeccompStrategy, error)

NewWithSeccompProfile creates a new must run as strategy or returns an error if it cannot be created.