package seccomp

import "github.com/opencontainers/runc/libcontainer/seccomp"

Index ¶

• Constants
• Variables
• func ConvertStringToAction(in string) (configs.Action, error)
• func ConvertStringToArch(in string) (string, error)
• func ConvertStringToOperator(in string) (configs.Operator, error)
• func FlagSupported(_ specs.LinuxSeccompFlag) error
• func InitSeccomp(config *configs.Seccomp) (int, error)
• func KnownActions() []string
• func KnownArchs() []string
• func KnownFlags() []string
• func KnownOperators() []string
• func SupportedFlags() []string
• func Version() (uint, uint, uint)

Constants ¶

const Enabled = false

Enabled is true if seccomp support is compiled in.

Variables ¶

var ErrSeccompNotEnabled = errors.New("seccomp: config provided but seccomp not supported")

Functions ¶

func ConvertStringToAction ¶

func ConvertStringToAction(in string) (configs.Action, error)

ConvertStringToAction converts a string into a Seccomp rule match action. Actions use the names they are assigned in Libseccomp's header. Attempting to convert a string that is not a valid action results in an error.

func ConvertStringToArch ¶

func ConvertStringToArch(in string) (string, error)

ConvertStringToArch converts a string into a Seccomp comparison arch.

func ConvertStringToOperator ¶

func ConvertStringToOperator(in string) (configs.Operator, error)

ConvertStringToOperator converts a string into a Seccomp comparison operator. Comparison operators use the names they are assigned by Libseccomp's header. Attempting to convert a string that is not a valid operator results in an error.

func FlagSupported ¶

func FlagSupported(_ specs.LinuxSeccompFlag) error

FlagSupported tells if a provided seccomp flag is supported.

func InitSeccomp ¶

func InitSeccomp(config *configs.Seccomp) (int, error)

InitSeccomp does nothing because seccomp is not supported.

func KnownActions ¶

func KnownActions() []string

KnownActions returns the list of the known actions. Used by `runc features`.

func KnownArchs ¶

func KnownArchs() []string

KnownArchs returns the list of the known archs. Used by `runc features`.

func KnownFlags ¶

func KnownFlags() []string

KnownFlags returns the list of the known filter flags. Used by `runc features`.

func KnownOperators ¶

func KnownOperators() []string

KnownOperators returns the list of the known operations. Used by `runc features`.

func SupportedFlags ¶

func SupportedFlags() []string

SupportedFlags returns the list of the supported filter flags. This list may be a subset of one returned by KnownFlags due to some flags not supported by the current kernel and/or libseccomp. Used by `runc features`.

func Version ¶

func Version() (uint, uint, uint)

Version returns major, minor, and micro.

Source Files ¶

config.go seccomp_unsupported.go

Directories ¶