package filter

import "gvisor.dev/gvisor/runsc/fsgofer/filter"

Package filter defines all syscalls the gofer is allowed to make, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.

Index ¶

• func Install(opt Options) error
• type Options

Functions ¶

func Install ¶

func Install(opt Options) error

Install installs seccomp filters.

Types ¶

type Options ¶

type Options struct {
	UDSOpenEnabled   bool
	UDSCreateEnabled bool
	ProfileEnabled   bool
	DirectFS         bool
	CgoEnabled       bool
}

Options are seccomp filter related options.

Source Files ¶

config.go config_amd64.go config_cgo.go config_profile.go extra_filters.go filter.go