Q: interface for bpf program #24
Assignees
Labels
Comments
|
The libseccomp library is just that, a library, it doesn't provide a standard user interface, it is up to the individual applications - in this case the container management application - to provide a user interface for the libseccomp functionality. |
drakenclimber
added a commit
to drakenclimber/libseccomp
that referenced
this issue
Jan 8, 2020
Signed-off-by: Tom Hromatka <[email protected]>
drakenclimber
added a commit
to drakenclimber/libseccomp
that referenced
this issue
Aug 31, 2021
The python live test, 24-live-arg_allow.py, started failing on Fedora 34 with kernel 5.13.9-200.fc34.x86_64. To fix this, allow the munmap() syscall in the test's seccomp filter. Signed-off-by: Tom Hromatka <[email protected]>
drakenclimber
added a commit
that referenced
this issue
Sep 1, 2021
The python live test, 24-live-arg_allow.py, started failing on Python version 3.9.6+ on Fedora 34 and Ubuntu 20.10. The Python quit() call is now invoking the munmap() syscall. To fix this, allow the munmap() syscall in the test's seccomp filter. Acked-by: Paul Moore <[email protected]> Signed-off-by: Tom Hromatka <[email protected]>
drakenclimber
added a commit
that referenced
this issue
Sep 1, 2021
The python live test, 24-live-arg_allow.py, started failing on Python version 3.9.6+ on Fedora 34 and Ubuntu 20.10. The Python quit() call is now invoking the munmap() syscall. To fix this, allow the munmap() syscall in the test's seccomp filter. Acked-by: Paul Moore <[email protected]> Signed-off-by: Tom Hromatka <[email protected]> (cherry picked from commit 4f34c6e)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Is there an example showing how to specify a seccomp bpf filter program to a container? eg. http:https://man7.org/linux/man-pages/man2/seccomp.2.html
The text was updated successfully, but these errors were encountered: