filter

Documentation

Overview

Package filter defines all syscalls the gofer is allowed to make, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.

Index

• func Install(opt Options) error
• type Options

Functions

func Install

func Install(opt Options) error

Install installs seccomp filters.

Types

type Options

type Options struct {
	UDSOpenEnabled   bool
	UDSCreateEnabled bool
	ProfileEnabled   bool
	DirectFS         bool
	CgoEnabled       bool
}

Options are seccomp filter related options.