libseccomp

Documentation

Overview

Package libseccomp provides a wrapper for "github.com/seccomp/libseccomp-golang"

Index

• Constants
• func ExportBPF(filter []bpf.Instruction) (seccomp.Filter, error)
• func ToSeccompAction(a Action) libseccomp.Action
• func ToSyscallName(sysno uint) (string, error)
• type Action
  • func (a Action) Action() Action
• type Builder
  • func (b *Builder) Build() (seccomp.Filter, error)

Constants

const (
	MsgDisallow int16 = iota + 1
	MsgHandle
)

MsgDisallow, Msghandle defines the action needed when trapped by seccomp filter

Functions

func ExportBPF

func ExportBPF(filter []bpf.Instruction) (seccomp.Filter, error)

ExportBPF convert libseccomp filter to kernel readable BPF content

func ToSeccompAction

func ToSeccompAction(a Action) libseccomp.Action

ToSeccompAction convert action to libseccomp compatible action

func ToSyscallName

func ToSyscallName(sysno uint) (string, error)

ToSyscallName convert syscallno to syscall name

Types

type Action

type Action uint32

Action is seccomp trap action

const (
	ActionAllow Action = iota + 1
	ActionErrno
	ActionTrace
	ActionKill
)

Action defines seccomp action to the syscall default value 0 is invalid

func (Action) Action

func (a Action) Action() Action

Action get the basic action

type Builder

type Builder struct {
	Allow, Trace []string
	Default      Action
}

Builder is used to build the filter

func (*Builder) Build

func (b *Builder) Build() (seccomp.Filter, error)

Build builds the filter