seccomp

package module

Go to main page

Versions in this module

v0

v0.12.0

Aug 28, 2026

v0.11.1

Aug 5, 2025

v0.11.0

Apr 23, 2025

Changes in this version

type ScmpArch

+ const ArchLOONGARCH64

+ const ArchM68K

+ const ArchSH

+ const ArchSHEB

type ScmpFilter

+ func (f *ScmpFilter) ExportBPFMem() ([]byte, error)

+ func (f *ScmpFilter) GetWaitKill() (bool, error)

+ func (f *ScmpFilter) Precompute() error

+ func (f *ScmpFilter) SetWaitKill(state bool) error

+ func (f *ScmpFilter) TransactionCommit() error

+ func (f *ScmpFilter) TransactionReject()

+ func (f *ScmpFilter) TransactionStart() error

v0.10.0

Jun 9, 2022

Changes in this version

+ const NotifRespFlagContinue

+ var ErrSyscallDoesNotExist = errors.New("could not resolve syscall name")

+ func GetAPI() (uint, error)

+ func GetLibraryVersion() (major, minor, micro uint) — darwin/amd64, js/wasm, windows/amd64

+ func NotifIDValid(fd ScmpFd, id uint64) error

+ func NotifRespond(fd ScmpFd, scmpResp *ScmpNotifResp) error

+ func SetAPI(api uint) error

+ type ScmpAction uint — darwin/amd64, js/wasm, windows/amd64

+ const ActAllow

+ const ActErrno

+ const ActInvalid

+ const ActKill

+ const ActKillProcess

+ const ActKillThread

+ const ActLog

+ const ActNotify

+ const ActTrace

+ const ActTrap

+ func (a ScmpAction) GetReturnCode() int16

+ func (a ScmpAction) SetReturnCode(code int16) ScmpAction

+ func (a ScmpAction) String() string

+ type ScmpArch uint — darwin/amd64, js/wasm, windows/amd64

+ const ArchAMD64

+ const ArchARM

+ const ArchARM64

+ const ArchInvalid

+ const ArchMIPS

+ const ArchMIPS64

+ const ArchMIPS64N32

+ const ArchMIPSEL

+ const ArchMIPSEL64

+ const ArchMIPSEL64N32

+ const ArchNative

+ const ArchPARISC

+ const ArchPARISC64

+ const ArchPPC

+ const ArchPPC64

+ const ArchPPC64LE

+ const ArchRISCV64

+ const ArchS390

+ const ArchS390X

+ const ArchX32

+ const ArchX86

+ func GetArchFromString(arch string) (ScmpArch, error)

+ func GetNativeArch() (ScmpArch, error)

+ func (a ScmpArch) String() string

+ type ScmpCompareOp uint — darwin/amd64, js/wasm, windows/amd64

+ const CompareEqual

+ const CompareGreater

+ const CompareGreaterEqual

+ const CompareInvalid

+ const CompareLess

+ const CompareLessOrEqual

+ const CompareMaskedEqual

+ const CompareNotEqual

+ func (a ScmpCompareOp) String() string

+ type ScmpCondition struct — darwin/amd64, js/wasm, windows/amd64

+ Argument uint

+ Op ScmpCompareOp

+ Operand1 uint64

+ Operand2 uint64

+ func MakeCondition(arg uint, comparison ScmpCompareOp, values ...uint64) (ScmpCondition, error)

+ type ScmpFd int32

+ type ScmpFilter struct — darwin/amd64, js/wasm, windows/amd64

+ func NewFilter(defaultAction ScmpAction) (*ScmpFilter, error)

+ func (f *ScmpFilter) AddArch(arch ScmpArch) error

+ func (f *ScmpFilter) AddRule(call ScmpSyscall, action ScmpAction) error

+ func (f *ScmpFilter) AddRuleConditional(call ScmpSyscall, action ScmpAction, conds []ScmpCondition) error

+ func (f *ScmpFilter) AddRuleConditionalExact(call ScmpSyscall, action ScmpAction, conds []ScmpCondition) error

+ func (f *ScmpFilter) AddRuleExact(call ScmpSyscall, action ScmpAction) error

+ func (f *ScmpFilter) ExportBPF(file *os.File) error

+ func (f *ScmpFilter) ExportPFC(file *os.File) error

+ func (f *ScmpFilter) GetBadArchAction() (ScmpAction, error)

+ func (f *ScmpFilter) GetDefaultAction() (ScmpAction, error)

+ func (f *ScmpFilter) GetLogBit() (bool, error)

+ func (f *ScmpFilter) GetNoNewPrivsBit() (bool, error)

+ func (f *ScmpFilter) GetNotifFd() (ScmpFd, error)

+ func (f *ScmpFilter) GetOptimize() (int, error)

+ func (f *ScmpFilter) GetRawRC() (bool, error)

+ func (f *ScmpFilter) GetSSB() (bool, error)

+ func (f *ScmpFilter) IsArchPresent(arch ScmpArch) (bool, error)

+ func (f *ScmpFilter) IsValid() bool

+ func (f *ScmpFilter) Load() error

+ func (f *ScmpFilter) Merge(src *ScmpFilter) error

+ func (f *ScmpFilter) Release()

+ func (f *ScmpFilter) RemoveArch(arch ScmpArch) error

+ func (f *ScmpFilter) Reset(defaultAction ScmpAction) error

+ func (f *ScmpFilter) SetBadArchAction(action ScmpAction) error

+ func (f *ScmpFilter) SetLogBit(state bool) error

+ func (f *ScmpFilter) SetNoNewPrivsBit(state bool) error

+ func (f *ScmpFilter) SetOptimize(level int) error

+ func (f *ScmpFilter) SetRawRC(state bool) error

+ func (f *ScmpFilter) SetSSB(state bool) error

+ func (f *ScmpFilter) SetSyscallPriority(call ScmpSyscall, priority uint8) error

+ type ScmpNotifData struct

+ Arch ScmpArch

+ Args []uint64

+ InstrPointer uint64

+ Syscall ScmpSyscall

+ type ScmpNotifReq struct

+ Data ScmpNotifData

+ Flags uint32

+ ID uint64

+ Pid uint32

+ func NotifReceive(fd ScmpFd) (*ScmpNotifReq, error)

+ type ScmpNotifResp struct

+ Error int32

+ Flags uint32

+ ID uint64

+ Val uint64

+ type ScmpSyscall int32 — darwin/amd64, js/wasm, windows/amd64

+ func GetSyscallFromName(name string) (ScmpSyscall, error)

+ func GetSyscallFromNameByArch(name string, arch ScmpArch) (ScmpSyscall, error)

+ func (s ScmpSyscall) GetName() (string, error)

+ func (s ScmpSyscall) GetNameByArch(arch ScmpArch) (string, error)

+ type VersionError struct — darwin/amd64, js/wasm, windows/amd64

+ func (e VersionError) Error() string

v0.9.1

May 21, 2019

Changes in this version

+ func GetApi() (uint, error) — linux/amd64

+ func SetApi(api uint) error — linux/amd64

type ScmpAction — linux/amd64

+ const ActLog

type ScmpFilter — linux/amd64

+ func (f *ScmpFilter) GetLogBit() (bool, error)

+ func (f *ScmpFilter) SetLogBit(state bool) error

v0.9.0

Jan 5, 2017 GO-2020-0007

GO-2020-0007: Improper input validation in github.com/seccomp/libseccomp-golang

Changes in this version

+ func GetLibraryVersion() (major, minor, micro int) — linux/amd64

+ type ScmpAction uint — linux/amd64

+ const ActAllow

+ const ActErrno

+ const ActInvalid

+ const ActKill

+ const ActTrace

+ const ActTrap

+ func (a ScmpAction) GetReturnCode() int16

+ func (a ScmpAction) SetReturnCode(code int16) ScmpAction

+ func (a ScmpAction) String() string

+ type ScmpArch uint — linux/amd64

+ const ArchAMD64

+ const ArchARM

+ const ArchARM64

+ const ArchInvalid

+ const ArchMIPS

+ const ArchMIPS64

+ const ArchMIPS64N32

+ const ArchMIPSEL

+ const ArchMIPSEL64

+ const ArchMIPSEL64N32

+ const ArchNative

+ const ArchPPC

+ const ArchPPC64

+ const ArchPPC64LE

+ const ArchS390

+ const ArchS390X

+ const ArchX32

+ const ArchX86

+ func GetArchFromString(arch string) (ScmpArch, error)

+ func GetNativeArch() (ScmpArch, error)

+ func (a ScmpArch) String() string

+ type ScmpCompareOp uint — linux/amd64

+ const CompareEqual

+ const CompareGreater

+ const CompareGreaterEqual

+ const CompareInvalid

+ const CompareLess

+ const CompareLessOrEqual

+ const CompareMaskedEqual

+ const CompareNotEqual

+ func (a ScmpCompareOp) String() string

+ type ScmpCondition struct — linux/amd64

+ Argument uint

+ Op ScmpCompareOp

+ Operand1 uint64

+ Operand2 uint64

+ func MakeCondition(arg uint, comparison ScmpCompareOp, values ...uint64) (ScmpCondition, error)

+ type ScmpFilter struct — linux/amd64

+ func NewFilter(defaultAction ScmpAction) (*ScmpFilter, error)

+ func (f *ScmpFilter) AddArch(arch ScmpArch) error

+ func (f *ScmpFilter) AddRule(call ScmpSyscall, action ScmpAction) error

+ func (f *ScmpFilter) AddRuleConditional(call ScmpSyscall, action ScmpAction, conds []ScmpCondition) error

+ func (f *ScmpFilter) AddRuleConditionalExact(call ScmpSyscall, action ScmpAction, conds []ScmpCondition) error

+ func (f *ScmpFilter) AddRuleExact(call ScmpSyscall, action ScmpAction) error

+ func (f *ScmpFilter) ExportBPF(file *os.File) error

+ func (f *ScmpFilter) ExportPFC(file *os.File) error

+ func (f *ScmpFilter) GetBadArchAction() (ScmpAction, error)

+ func (f *ScmpFilter) GetDefaultAction() (ScmpAction, error)

+ func (f *ScmpFilter) GetNoNewPrivsBit() (bool, error)

+ func (f *ScmpFilter) GetTsyncBit() (bool, error)

+ func (f *ScmpFilter) IsArchPresent(arch ScmpArch) (bool, error)

+ func (f *ScmpFilter) IsValid() bool

+ func (f *ScmpFilter) Load() error

+ func (f *ScmpFilter) Merge(src *ScmpFilter) error

+ func (f *ScmpFilter) Release()

+ func (f *ScmpFilter) RemoveArch(arch ScmpArch) error

+ func (f *ScmpFilter) Reset(defaultAction ScmpAction) error

+ func (f *ScmpFilter) SetBadArchAction(action ScmpAction) error

+ func (f *ScmpFilter) SetNoNewPrivsBit(state bool) error

+ func (f *ScmpFilter) SetSyscallPriority(call ScmpSyscall, priority uint8) error

+ func (f *ScmpFilter) SetTsync(enable bool) error

+ type ScmpSyscall int32 — linux/amd64

+ func GetSyscallFromName(name string) (ScmpSyscall, error)

+ func GetSyscallFromNameByArch(name string, arch ScmpArch) (ScmpSyscall, error)

+ func (s ScmpSyscall) GetName() (string, error)

+ func (s ScmpSyscall) GetNameByArch(arch ScmpArch) (string, error)

+ type VersionError struct — linux/amd64

+ func (e VersionError) Error() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL