package filter

import "gvisor.dev/gvisor/runsc/boot/filter"

Package filter installs seccomp filters to prevent prohibited syscalls in case it's compromised.

Index

Functions

func Install 

func Install(opt Options) error

Install seccomp filters based on the given platform.

Types

type Options 

type Options = config.Options

Options is a re-export of the config Options type under this package.

Source Files

filter.go

Directories

PathSynopsis
runsc/boot/filter/configPackage config defines all syscalls the sandbox is allowed to make to the host.
runsc/boot/filter/dumpfilterdumpfilter dumps the seccomp-bpf program used by the Sentry.
Version
v0.0.0-20250605235530-a6711d1e1dc6 (latest)
Published
Jun 5, 2025
Platform
linux/amd64
Imports
5 packages
Last checked
5 hours ago –

Tools for package owners.