seccomp

Documentation

Overview

Package seccomp provides a generated filter format for seccomp filter

Index

• Constants
• type Action
  • func (a Action) Action() Action
  • func (a Action) ReturnCode() int16
  • func (a Action) WithReturnCode(code int16) Action
• type Filter
  • func (f Filter) SockFprog() *syscall.SockFprog

Constants

const (
	MsgDisallow int16 = iota + 1
	MsgHandle
)

MsgDisallow, Msghandle defines the action needed when trapped by seccomp filter

Types

type Action

type Action uint32

Action is seccomp trap action

const (
	ActionAllow Action = iota + 1
	ActionErrno
	ActionTrace
	ActionKill
)

Action defines seccomp action to the syscall default value 0 is invalid

func (Action) Action

func (a Action) Action() Action

Action get the basic action

func (Action) ReturnCode

func (a Action) ReturnCode() int16

ReturnCode get the return code

func (Action) WithReturnCode

func (a Action) WithReturnCode(code int16) Action

WithReturnCode set the return code when action is trace or ban

type Filter

type Filter []byte

Filter is the BPF seccomp filter value

func (Filter) SockFprog

func (f Filter) SockFprog() *syscall.SockFprog

SockFprog converts Filter to SockFprog for seccomp syscall