filter

Documentation

Overview

Package filter defines all syscalls the sandbox is allowed to make to the host, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.

Index

• func Install(opt Options) error
• func Report(msg string)
• type Options

Functions

func Install

func Install(opt Options) error

Install installs seccomp filters for based on the given platform.

func Report

func Report(msg string)

Report writes a warning message to the log.

Types

type Options

type Options struct {
	Platform      platform.Platform
	HostNetwork   bool
	ProfileEnable bool
	ControllerFD  int
}

Options are seccomp filter related options.