seccomp

Documentation

Index

• Constants
• Variables
• func ConvertStringToAction(in string) (configs.Action, error)
• func ConvertStringToArch(in string) (string, error)
• func ConvertStringToOperator(in string) (configs.Operator, error)
• func FlagSupported(_ specs.LinuxSeccompFlag) error
• func InitSeccomp(config *configs.Seccomp) (*os.File, error)
• func KnownActions() []string
• func KnownArchs() []string
• func KnownFlags() []string
• func KnownOperators() []string
• func SupportedFlags() []string
• func Version() (uint, uint, uint)

Constants

const Enabled = false

Enabled is true if seccomp support is compiled in.

Variables

var ErrSeccompNotEnabled = errors.New("seccomp: config provided but seccomp not supported")

Functions

func ConvertStringToAction

func ConvertStringToAction(in string) (configs.Action, error)

ConvertStringToAction converts a string into a Seccomp rule match action. Actions use the names they are assigned in Libseccomp's header. Attempting to convert a string that is not a valid action results in an error.

func ConvertStringToArch

func ConvertStringToArch(in string) (string, error)

ConvertStringToArch converts a string into a Seccomp comparison arch.

func ConvertStringToOperator

func ConvertStringToOperator(in string) (configs.Operator, error)

ConvertStringToOperator converts a string into a Seccomp comparison operator. Comparison operators use the names they are assigned by Libseccomp's header. Attempting to convert a string that is not a valid operator results in an error.

func FlagSupported

func FlagSupported(_ specs.LinuxSeccompFlag) error

FlagSupported tells if a provided seccomp flag is supported.

func InitSeccomp

func InitSeccomp(config *configs.Seccomp) (*os.File, error)

InitSeccomp does nothing because seccomp is not supported.

func KnownActions

func KnownActions() []string

KnownActions returns the list of the known actions. Used by `runc features`.

func KnownArchs

func KnownArchs() []string

KnownArchs returns the list of the known archs. Used by `runc features`.

func KnownFlags

func KnownFlags() []string

KnownFlags returns the list of the known filter flags. Used by `runc features`.

func KnownOperators

func KnownOperators() []string

KnownOperators returns the list of the known operations. Used by `runc features`.

func SupportedFlags

func SupportedFlags() []string

SupportedFlags returns the list of the supported filter flags. This list may be a subset of one returned by KnownFlags due to some flags not supported by the current kernel and/or libseccomp. Used by `runc features`.

func Version

func Version() (uint, uint, uint)

Version returns major, minor, and micro.