seccomp

Documentation

Index

• type Config
  • func New() *Config
  • func (c *Config) IsDisabled() bool
  • func (c *Config) LoadProfile(profilePath string) error
  • func (c *Config) Profile() *seccomp.Seccomp
  • func (c *Config) SetDefaultWhenEmpty()
  • func (c *Config) Setup(ctx context.Context, specGenerator *generate.Generator, ...) error
  • func (c *Config) UseDefaultWhenEmpty() bool

Types

type Config

type Config struct {
	// contains filtered or unexported fields
}

Config is the global seccomp configuration type

func New

func New() *Config

New creates a new default seccomp configuration instance

func (*Config) IsDisabled

func (c *Config) IsDisabled() bool

IsDisabled returns true if seccomp is disabled either via the missing `seccomp` buildtag or globally by the system.

func (*Config) LoadProfile

func (c *Config) LoadProfile(profilePath string) error

LoadProfile can be used to load a seccomp profile from the provided path. This method will not fail if seccomp is disabled.

func (*Config) Profile

func (c *Config) Profile() *seccomp.Seccomp

Profile returns the currently loaded seccomp profile

func (*Config) SetDefaultWhenEmpty

func (c *Config) SetDefaultWhenEmpty()

Set the seccomp config to use default profile when the profile is empty

func (*Config) Setup

func (c *Config) Setup(
	ctx context.Context,
	specGenerator *generate.Generator,
	profileField *types.SecurityProfile,
	profilePath string,
) error

Setup can be used to setup the seccomp profile.

func (*Config) UseDefaultWhenEmpty

func (c *Config) UseDefaultWhenEmpty() bool

Returns whether the seccomp config is set to use default profile when the profile is empty