sandbox

Jun 14, 2018

Changes in this version

+ const AUDIT_ARCH_X86_64 — linux/amd64

+ const EM_X86_64 — linux/amd64

+ const NATIVE_AUDIT_ARCH — linux/amd64

+ const SECCOMP_RET_ALLOW — linux/amd64

+ const SECCOMP_RET_ERRNO — linux/amd64

+ var AllowedSyscalls = []SeccompSyscall — linux/amd64

+ func CheckSupport() error

+ func EnableSeccompFilter(filter []bpf.Instruction) error — linux/amd64

+ func NewProcess(ctx context.Context, config *Configuration, path string) (rpcplugin.Process, io.ReadWriteCloser, error)

+ func SeccompFilter(arch uint32, allowedSyscalls []SeccompSyscall) (filter []bpf.Instruction) — linux/amd64

+ func SupervisorProvider(bundle *model.BundleInfo) (plugin.Supervisor, error)

+ type Configuration struct

+ MountPoints []*MountPoint

+ WorkingDirectory string

+ type MountPoint struct

+ Destination string

+ ReadOnly bool

+ Source string

+ Type string

+ type SeccompArgEquals struct — linux/amd64

+ Arg int

+ Value uint64

+ func (c SeccompArgEquals) Filter(littleEndian bool, skipFalseSentinel uint8) []bpf.Instruction

+ type SeccompArgHasAnyBit struct — linux/amd64

+ Arg int

+ Mask uint64

+ func (c SeccompArgHasAnyBit) Filter(littleEndian bool, skipFalseSentinel uint8) []bpf.Instruction

+ type SeccompArgHasNoBits struct — linux/amd64

+ Arg int

+ Mask uint64

+ func (c SeccompArgHasNoBits) Filter(littleEndian bool, skipFalseSentinel uint8) []bpf.Instruction

+ type SeccompCondition interface — linux/amd64

+ Filter func(littleEndian bool, skipFalseSentinel uint8) []bpf.Instruction

+ type SeccompConditions struct — linux/amd64

+ All []SeccompCondition

+ type SeccompSyscall struct — linux/amd64

+ Any []SeccompConditions

+ Syscall uint32