filter

Documentation

Overview

Package filter defines all syscalls the sandbox is allowed to make to the host, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.

Index

• func Install(opt Options) error
• func Report(msg string)
• type Options

Functions

func Install

func Install(opt Options) error

Install seccomp filters based on the given platform.

func Report

func Report(msg string)

Report writes a warning message to the log.

Types

type Options

type Options struct {
	Platform              platform.Platform
	HostNetwork           bool
	HostNetworkRawSockets bool
	HostFilesystem        bool
	ProfileEnable         bool
	NVProxy               bool
	TPUProxy              bool
	ControllerFD          int
}

Options are seccomp filter related options.