Documentation
¶
Overview ¶
Package std contains constants from container packages without depending on cgo.
Index ¶
Constants ¶
const ( // BindOptional skips nonexistent host paths. BindOptional = 1 << iota // BindWritable mounts filesystem read-write. BindWritable // BindDevice allows access to devices (special files) on this filesystem. BindDevice // BindEnsure attempts to create the host path if it does not exist. BindEnsure )
const ( SYS_NAME_TO_HANDLE_AT = 303 SYS_OPEN_BY_HANDLE_AT = 304 SYS_CLOCK_ADJTIME = 305 SYS_SYNCFS = 306 SYS_SENDMMSG = 307 SYS_SETNS = 308 SYS_GETCPU = 309 SYS_PROCESS_VM_READV = 310 SYS_PROCESS_VM_WRITEV = 311 SYS_KCMP = 312 SYS_FINIT_MODULE = 313 SYS_SCHED_SETATTR = 314 SYS_SCHED_GETATTR = 315 SYS_RENAMEAT2 = 316 SYS_SECCOMP = 317 SYS_GETRANDOM = 318 SYS_MEMFD_CREATE = 319 SYS_KEXEC_FILE_LOAD = 320 SYS_BPF = 321 SYS_EXECVEAT = 322 SYS_USERFAULTFD = 323 SYS_MEMBARRIER = 324 SYS_MLOCK2 = 325 SYS_COPY_FILE_RANGE = 326 SYS_PREADV2 = 327 SYS_PWRITEV2 = 328 SYS_PKEY_MPROTECT = 329 SYS_PKEY_ALLOC = 330 SYS_PKEY_FREE = 331 SYS_STATX = 332 SYS_IO_PGETEVENTS = 333 SYS_RSEQ = 334 SYS_URETPROBE = 335 SYS_PIDFD_SEND_SIGNAL = 424 SYS_IO_URING_SETUP = 425 SYS_IO_URING_ENTER = 426 SYS_IO_URING_REGISTER = 427 SYS_OPEN_TREE = 428 SYS_MOVE_MOUNT = 429 SYS_FSOPEN = 430 SYS_FSCONFIG = 431 SYS_FSMOUNT = 432 SYS_FSPICK = 433 SYS_PIDFD_OPEN = 434 SYS_CLONE3 = 435 SYS_CLOSE_RANGE = 436 SYS_OPENAT2 = 437 SYS_PIDFD_GETFD = 438 SYS_FACCESSAT2 = 439 SYS_PROCESS_MADVISE = 440 SYS_EPOLL_PWAIT2 = 441 SYS_MOUNT_SETATTR = 442 SYS_QUOTACTL_FD = 443 SYS_LANDLOCK_CREATE_RULESET = 444 SYS_LANDLOCK_ADD_RULE = 445 SYS_LANDLOCK_RESTRICT_SELF = 446 SYS_MEMFD_SECRET = 447 SYS_PROCESS_MRELEASE = 448 SYS_FUTEX_WAITV = 449 SYS_SET_MEMPOLICY_HOME_NODE = 450 SYS_CACHESTAT = 451 SYS_FCHMODAT2 = 452 SYS_MAP_SHADOW_STACK = 453 SYS_FUTEX_WAKE = 454 SYS_FUTEX_WAIT = 455 SYS_FUTEX_REQUEUE = 456 SYS_STATMOUNT = 457 SYS_LISTMOUNT = 458 SYS_LSM_GET_SELF_ATTR = 459 SYS_LSM_SET_SELF_ATTR = 460 SYS_LSM_LIST_MODULES = 461 SYS_MSEAL = 462 )
Variables ¶
This section is empty.
Functions ¶
Types ¶
type FilterPreset ¶
type FilterPreset int
FilterPreset specifies parts of the syscall filter preset to enable.
const ( // PresetExt are project-specific extensions. PresetExt FilterPreset = 1 << iota // PresetDenyNS denies namespace setup syscalls. PresetDenyNS // PresetDenyTTY denies faking input. PresetDenyTTY // PresetDenyDevel denies development-related syscalls. PresetDenyDevel // PresetLinux32 sets PER_LINUX32. PresetLinux32 // PresetStrict is a strict preset useful as a default value. PresetStrict = PresetExt | PresetDenyNS | PresetDenyTTY | PresetDenyDevel )
type NativeRule ¶
type NativeRule struct {
// Syscall is the arch-dependent syscall number to act against.
Syscall ScmpSyscall `json:"syscall"`
// Errno is the errno value to return when the condition is satisfied.
Errno ScmpErrno `json:"errno"`
// Arg is the optional struct scmp_arg_cmp passed to libseccomp.
Arg *ScmpArgCmp `json:"arg,omitempty"`
}
A NativeRule specifies an arch-specific action taken by seccomp under certain conditions.
type ScmpArgCmp ¶
type ScmpArgCmp struct {
// argument number, starting at 0
Arg ScmpUint `json:"arg"`
// the comparison op, e.g. SCMP_CMP_*
Op ScmpCompare `json:"op"`
DatumA ScmpDatum `json:"a,omitempty"`
DatumB ScmpDatum `json:"b,omitempty"`
}
ScmpArgCmp is equivalent to struct scmp_arg_cmp.
type ScmpErrno ¶
type ScmpErrno ScmpInt
ScmpErrno represents an errno value passed to libseccomp via [NativeRule.Errno].
type ScmpSyscall ¶
type ScmpSyscall ScmpInt
ScmpSyscall represents a syscall number passed to libseccomp via [NativeRule.Syscall].
const ( SNR_UMOUNT ScmpSyscall = __PNR_umount SNR_SUBPAGE_PROT ScmpSyscall = __PNR_subpage_prot SNR_SWITCH_ENDIAN ScmpSyscall = __PNR_switch_endian SNR_VM86 ScmpSyscall = __PNR_vm86 SNR_VM86OLD ScmpSyscall = __PNR_vm86old SNR_CLOCK_ADJTIME64 ScmpSyscall = __PNR_clock_adjtime64 SNR_CLOCK_SETTIME64 ScmpSyscall = __PNR_clock_settime64 SNR_CHOWN32 ScmpSyscall = __PNR_chown32 SNR_FCHOWN32 ScmpSyscall = __PNR_fchown32 SNR_LCHOWN32 ScmpSyscall = __PNR_lchown32 SNR_SETGID32 ScmpSyscall = __PNR_setgid32 SNR_SETGROUPS32 ScmpSyscall = __PNR_setgroups32 SNR_SETREGID32 ScmpSyscall = __PNR_setregid32 SNR_SETRESGID32 ScmpSyscall = __PNR_setresgid32 SNR_SETRESUID32 ScmpSyscall = __PNR_setresuid32 SNR_SETREUID32 ScmpSyscall = __PNR_setreuid32 SNR_SETUID32 ScmpSyscall = __PNR_setuid32 )
const ( SNR_READ ScmpSyscall = SYS_READ SNR_WRITE ScmpSyscall = SYS_WRITE SNR_OPEN ScmpSyscall = SYS_OPEN SNR_CLOSE ScmpSyscall = SYS_CLOSE SNR_STAT ScmpSyscall = SYS_STAT SNR_FSTAT ScmpSyscall = SYS_FSTAT SNR_LSTAT ScmpSyscall = SYS_LSTAT SNR_POLL ScmpSyscall = SYS_POLL SNR_LSEEK ScmpSyscall = SYS_LSEEK SNR_MMAP ScmpSyscall = SYS_MMAP SNR_MPROTECT ScmpSyscall = SYS_MPROTECT SNR_MUNMAP ScmpSyscall = SYS_MUNMAP SNR_BRK ScmpSyscall = SYS_BRK SNR_RT_SIGACTION ScmpSyscall = SYS_RT_SIGACTION SNR_RT_SIGPROCMASK ScmpSyscall = SYS_RT_SIGPROCMASK SNR_RT_SIGRETURN ScmpSyscall = SYS_RT_SIGRETURN SNR_IOCTL ScmpSyscall = SYS_IOCTL SNR_PREAD64 ScmpSyscall = SYS_PREAD64 SNR_PWRITE64 ScmpSyscall = SYS_PWRITE64 SNR_READV ScmpSyscall = SYS_READV SNR_WRITEV ScmpSyscall = SYS_WRITEV SNR_ACCESS ScmpSyscall = SYS_ACCESS SNR_PIPE ScmpSyscall = SYS_PIPE SNR_SELECT ScmpSyscall = SYS_SELECT SNR_SCHED_YIELD ScmpSyscall = SYS_SCHED_YIELD SNR_MREMAP ScmpSyscall = SYS_MREMAP SNR_MSYNC ScmpSyscall = SYS_MSYNC SNR_MINCORE ScmpSyscall = SYS_MINCORE SNR_MADVISE ScmpSyscall = SYS_MADVISE SNR_SHMGET ScmpSyscall = SYS_SHMGET SNR_SHMAT ScmpSyscall = SYS_SHMAT SNR_SHMCTL ScmpSyscall = SYS_SHMCTL SNR_DUP ScmpSyscall = SYS_DUP SNR_DUP2 ScmpSyscall = SYS_DUP2 SNR_PAUSE ScmpSyscall = SYS_PAUSE SNR_NANOSLEEP ScmpSyscall = SYS_NANOSLEEP SNR_GETITIMER ScmpSyscall = SYS_GETITIMER SNR_ALARM ScmpSyscall = SYS_ALARM SNR_SETITIMER ScmpSyscall = SYS_SETITIMER SNR_GETPID ScmpSyscall = SYS_GETPID SNR_SENDFILE ScmpSyscall = SYS_SENDFILE SNR_SOCKET ScmpSyscall = SYS_SOCKET SNR_CONNECT ScmpSyscall = SYS_CONNECT SNR_ACCEPT ScmpSyscall = SYS_ACCEPT SNR_SENDTO ScmpSyscall = SYS_SENDTO SNR_RECVFROM ScmpSyscall = SYS_RECVFROM SNR_SENDMSG ScmpSyscall = SYS_SENDMSG SNR_RECVMSG ScmpSyscall = SYS_RECVMSG SNR_SHUTDOWN ScmpSyscall = SYS_SHUTDOWN SNR_BIND ScmpSyscall = SYS_BIND SNR_LISTEN ScmpSyscall = SYS_LISTEN SNR_GETSOCKNAME ScmpSyscall = SYS_GETSOCKNAME SNR_GETPEERNAME ScmpSyscall = SYS_GETPEERNAME SNR_SOCKETPAIR ScmpSyscall = SYS_SOCKETPAIR SNR_SETSOCKOPT ScmpSyscall = SYS_SETSOCKOPT SNR_GETSOCKOPT ScmpSyscall = SYS_GETSOCKOPT SNR_CLONE ScmpSyscall = SYS_CLONE SNR_FORK ScmpSyscall = SYS_FORK SNR_VFORK ScmpSyscall = SYS_VFORK SNR_EXECVE ScmpSyscall = SYS_EXECVE SNR_EXIT ScmpSyscall = SYS_EXIT SNR_WAIT4 ScmpSyscall = SYS_WAIT4 SNR_KILL ScmpSyscall = SYS_KILL SNR_UNAME ScmpSyscall = SYS_UNAME SNR_SEMGET ScmpSyscall = SYS_SEMGET SNR_SEMOP ScmpSyscall = SYS_SEMOP SNR_SEMCTL ScmpSyscall = SYS_SEMCTL SNR_SHMDT ScmpSyscall = SYS_SHMDT SNR_MSGGET ScmpSyscall = SYS_MSGGET SNR_MSGSND ScmpSyscall = SYS_MSGSND SNR_MSGRCV ScmpSyscall = SYS_MSGRCV SNR_MSGCTL ScmpSyscall = SYS_MSGCTL SNR_FCNTL ScmpSyscall = SYS_FCNTL SNR_FLOCK ScmpSyscall = SYS_FLOCK SNR_FSYNC ScmpSyscall = SYS_FSYNC SNR_FDATASYNC ScmpSyscall = SYS_FDATASYNC SNR_TRUNCATE ScmpSyscall = SYS_TRUNCATE SNR_FTRUNCATE ScmpSyscall = SYS_FTRUNCATE SNR_GETDENTS ScmpSyscall = SYS_GETDENTS SNR_GETCWD ScmpSyscall = SYS_GETCWD SNR_CHDIR ScmpSyscall = SYS_CHDIR SNR_FCHDIR ScmpSyscall = SYS_FCHDIR SNR_RENAME ScmpSyscall = SYS_RENAME SNR_MKDIR ScmpSyscall = SYS_MKDIR SNR_RMDIR ScmpSyscall = SYS_RMDIR SNR_CREAT ScmpSyscall = SYS_CREAT SNR_LINK ScmpSyscall = SYS_LINK SNR_UNLINK ScmpSyscall = SYS_UNLINK SNR_SYMLINK ScmpSyscall = SYS_SYMLINK SNR_READLINK ScmpSyscall = SYS_READLINK SNR_CHMOD ScmpSyscall = SYS_CHMOD SNR_FCHMOD ScmpSyscall = SYS_FCHMOD SNR_CHOWN ScmpSyscall = SYS_CHOWN SNR_FCHOWN ScmpSyscall = SYS_FCHOWN SNR_LCHOWN ScmpSyscall = SYS_LCHOWN SNR_UMASK ScmpSyscall = SYS_UMASK SNR_GETTIMEOFDAY ScmpSyscall = SYS_GETTIMEOFDAY SNR_GETRLIMIT ScmpSyscall = SYS_GETRLIMIT SNR_GETRUSAGE ScmpSyscall = SYS_GETRUSAGE SNR_SYSINFO ScmpSyscall = SYS_SYSINFO SNR_TIMES ScmpSyscall = SYS_TIMES SNR_PTRACE ScmpSyscall = SYS_PTRACE SNR_GETUID ScmpSyscall = SYS_GETUID SNR_SYSLOG ScmpSyscall = SYS_SYSLOG SNR_GETGID ScmpSyscall = SYS_GETGID SNR_SETUID ScmpSyscall = SYS_SETUID SNR_SETGID ScmpSyscall = SYS_SETGID SNR_GETEUID ScmpSyscall = SYS_GETEUID SNR_GETEGID ScmpSyscall = SYS_GETEGID SNR_SETPGID ScmpSyscall = SYS_SETPGID SNR_GETPPID ScmpSyscall = SYS_GETPPID SNR_GETPGRP ScmpSyscall = SYS_GETPGRP SNR_SETSID ScmpSyscall = SYS_SETSID SNR_SETREUID ScmpSyscall = SYS_SETREUID SNR_SETREGID ScmpSyscall = SYS_SETREGID SNR_GETGROUPS ScmpSyscall = SYS_GETGROUPS SNR_SETGROUPS ScmpSyscall = SYS_SETGROUPS SNR_SETRESUID ScmpSyscall = SYS_SETRESUID SNR_GETRESUID ScmpSyscall = SYS_GETRESUID SNR_SETRESGID ScmpSyscall = SYS_SETRESGID SNR_GETRESGID ScmpSyscall = SYS_GETRESGID SNR_GETPGID ScmpSyscall = SYS_GETPGID SNR_SETFSUID ScmpSyscall = SYS_SETFSUID SNR_SETFSGID ScmpSyscall = SYS_SETFSGID SNR_GETSID ScmpSyscall = SYS_GETSID SNR_CAPGET ScmpSyscall = SYS_CAPGET SNR_CAPSET ScmpSyscall = SYS_CAPSET SNR_RT_SIGPENDING ScmpSyscall = SYS_RT_SIGPENDING SNR_RT_SIGTIMEDWAIT ScmpSyscall = SYS_RT_SIGTIMEDWAIT SNR_RT_SIGQUEUEINFO ScmpSyscall = SYS_RT_SIGQUEUEINFO SNR_RT_SIGSUSPEND ScmpSyscall = SYS_RT_SIGSUSPEND SNR_SIGALTSTACK ScmpSyscall = SYS_SIGALTSTACK SNR_UTIME ScmpSyscall = SYS_UTIME SNR_MKNOD ScmpSyscall = SYS_MKNOD SNR_USELIB ScmpSyscall = SYS_USELIB SNR_PERSONALITY ScmpSyscall = SYS_PERSONALITY SNR_USTAT ScmpSyscall = SYS_USTAT SNR_STATFS ScmpSyscall = SYS_STATFS SNR_FSTATFS ScmpSyscall = SYS_FSTATFS SNR_SYSFS ScmpSyscall = SYS_SYSFS SNR_GETPRIORITY ScmpSyscall = SYS_GETPRIORITY SNR_SETPRIORITY ScmpSyscall = SYS_SETPRIORITY SNR_SCHED_SETPARAM ScmpSyscall = SYS_SCHED_SETPARAM SNR_SCHED_GETPARAM ScmpSyscall = SYS_SCHED_GETPARAM SNR_SCHED_SETSCHEDULER ScmpSyscall = SYS_SCHED_SETSCHEDULER SNR_SCHED_GETSCHEDULER ScmpSyscall = SYS_SCHED_GETSCHEDULER SNR_SCHED_GET_PRIORITY_MAX ScmpSyscall = SYS_SCHED_GET_PRIORITY_MAX SNR_SCHED_GET_PRIORITY_MIN ScmpSyscall = SYS_SCHED_GET_PRIORITY_MIN SNR_SCHED_RR_GET_INTERVAL ScmpSyscall = SYS_SCHED_RR_GET_INTERVAL SNR_MLOCK ScmpSyscall = SYS_MLOCK SNR_MUNLOCK ScmpSyscall = SYS_MUNLOCK SNR_MLOCKALL ScmpSyscall = SYS_MLOCKALL SNR_MUNLOCKALL ScmpSyscall = SYS_MUNLOCKALL SNR_VHANGUP ScmpSyscall = SYS_VHANGUP SNR_MODIFY_LDT ScmpSyscall = SYS_MODIFY_LDT SNR_PIVOT_ROOT ScmpSyscall = SYS_PIVOT_ROOT SNR__SYSCTL ScmpSyscall = SYS__SYSCTL SNR_PRCTL ScmpSyscall = SYS_PRCTL SNR_ARCH_PRCTL ScmpSyscall = SYS_ARCH_PRCTL SNR_ADJTIMEX ScmpSyscall = SYS_ADJTIMEX SNR_SETRLIMIT ScmpSyscall = SYS_SETRLIMIT SNR_CHROOT ScmpSyscall = SYS_CHROOT SNR_SYNC ScmpSyscall = SYS_SYNC SNR_ACCT ScmpSyscall = SYS_ACCT SNR_SETTIMEOFDAY ScmpSyscall = SYS_SETTIMEOFDAY SNR_MOUNT ScmpSyscall = SYS_MOUNT SNR_UMOUNT2 ScmpSyscall = SYS_UMOUNT2 SNR_SWAPON ScmpSyscall = SYS_SWAPON SNR_SWAPOFF ScmpSyscall = SYS_SWAPOFF SNR_REBOOT ScmpSyscall = SYS_REBOOT SNR_SETHOSTNAME ScmpSyscall = SYS_SETHOSTNAME SNR_SETDOMAINNAME ScmpSyscall = SYS_SETDOMAINNAME SNR_IOPL ScmpSyscall = SYS_IOPL SNR_IOPERM ScmpSyscall = SYS_IOPERM SNR_CREATE_MODULE ScmpSyscall = SYS_CREATE_MODULE SNR_INIT_MODULE ScmpSyscall = SYS_INIT_MODULE SNR_DELETE_MODULE ScmpSyscall = SYS_DELETE_MODULE SNR_GET_KERNEL_SYMS ScmpSyscall = SYS_GET_KERNEL_SYMS SNR_QUERY_MODULE ScmpSyscall = SYS_QUERY_MODULE SNR_QUOTACTL ScmpSyscall = SYS_QUOTACTL SNR_NFSSERVCTL ScmpSyscall = SYS_NFSSERVCTL SNR_GETPMSG ScmpSyscall = SYS_GETPMSG SNR_PUTPMSG ScmpSyscall = SYS_PUTPMSG SNR_AFS_SYSCALL ScmpSyscall = SYS_AFS_SYSCALL SNR_TUXCALL ScmpSyscall = SYS_TUXCALL SNR_SECURITY ScmpSyscall = SYS_SECURITY SNR_GETTID ScmpSyscall = SYS_GETTID SNR_READAHEAD ScmpSyscall = SYS_READAHEAD SNR_SETXATTR ScmpSyscall = SYS_SETXATTR SNR_LSETXATTR ScmpSyscall = SYS_LSETXATTR SNR_FSETXATTR ScmpSyscall = SYS_FSETXATTR SNR_GETXATTR ScmpSyscall = SYS_GETXATTR SNR_LGETXATTR ScmpSyscall = SYS_LGETXATTR SNR_FGETXATTR ScmpSyscall = SYS_FGETXATTR SNR_LISTXATTR ScmpSyscall = SYS_LISTXATTR SNR_LLISTXATTR ScmpSyscall = SYS_LLISTXATTR SNR_FLISTXATTR ScmpSyscall = SYS_FLISTXATTR SNR_REMOVEXATTR ScmpSyscall = SYS_REMOVEXATTR SNR_LREMOVEXATTR ScmpSyscall = SYS_LREMOVEXATTR SNR_FREMOVEXATTR ScmpSyscall = SYS_FREMOVEXATTR SNR_TKILL ScmpSyscall = SYS_TKILL SNR_TIME ScmpSyscall = SYS_TIME SNR_FUTEX ScmpSyscall = SYS_FUTEX SNR_SCHED_SETAFFINITY ScmpSyscall = SYS_SCHED_SETAFFINITY SNR_SCHED_GETAFFINITY ScmpSyscall = SYS_SCHED_GETAFFINITY SNR_SET_THREAD_AREA ScmpSyscall = SYS_SET_THREAD_AREA SNR_IO_SETUP ScmpSyscall = SYS_IO_SETUP SNR_IO_DESTROY ScmpSyscall = SYS_IO_DESTROY SNR_IO_GETEVENTS ScmpSyscall = SYS_IO_GETEVENTS SNR_IO_SUBMIT ScmpSyscall = SYS_IO_SUBMIT SNR_IO_CANCEL ScmpSyscall = SYS_IO_CANCEL SNR_GET_THREAD_AREA ScmpSyscall = SYS_GET_THREAD_AREA SNR_LOOKUP_DCOOKIE ScmpSyscall = SYS_LOOKUP_DCOOKIE SNR_EPOLL_CREATE ScmpSyscall = SYS_EPOLL_CREATE SNR_EPOLL_CTL_OLD ScmpSyscall = SYS_EPOLL_CTL_OLD SNR_EPOLL_WAIT_OLD ScmpSyscall = SYS_EPOLL_WAIT_OLD SNR_REMAP_FILE_PAGES ScmpSyscall = SYS_REMAP_FILE_PAGES SNR_GETDENTS64 ScmpSyscall = SYS_GETDENTS64 SNR_SET_TID_ADDRESS ScmpSyscall = SYS_SET_TID_ADDRESS SNR_RESTART_SYSCALL ScmpSyscall = SYS_RESTART_SYSCALL SNR_SEMTIMEDOP ScmpSyscall = SYS_SEMTIMEDOP SNR_FADVISE64 ScmpSyscall = SYS_FADVISE64 SNR_TIMER_CREATE ScmpSyscall = SYS_TIMER_CREATE SNR_TIMER_SETTIME ScmpSyscall = SYS_TIMER_SETTIME SNR_TIMER_GETTIME ScmpSyscall = SYS_TIMER_GETTIME SNR_TIMER_GETOVERRUN ScmpSyscall = SYS_TIMER_GETOVERRUN SNR_TIMER_DELETE ScmpSyscall = SYS_TIMER_DELETE SNR_CLOCK_SETTIME ScmpSyscall = SYS_CLOCK_SETTIME SNR_CLOCK_GETTIME ScmpSyscall = SYS_CLOCK_GETTIME SNR_CLOCK_GETRES ScmpSyscall = SYS_CLOCK_GETRES SNR_CLOCK_NANOSLEEP ScmpSyscall = SYS_CLOCK_NANOSLEEP SNR_EXIT_GROUP ScmpSyscall = SYS_EXIT_GROUP SNR_EPOLL_WAIT ScmpSyscall = SYS_EPOLL_WAIT SNR_EPOLL_CTL ScmpSyscall = SYS_EPOLL_CTL SNR_TGKILL ScmpSyscall = SYS_TGKILL SNR_UTIMES ScmpSyscall = SYS_UTIMES SNR_VSERVER ScmpSyscall = SYS_VSERVER SNR_MBIND ScmpSyscall = SYS_MBIND SNR_SET_MEMPOLICY ScmpSyscall = SYS_SET_MEMPOLICY SNR_GET_MEMPOLICY ScmpSyscall = SYS_GET_MEMPOLICY SNR_MQ_OPEN ScmpSyscall = SYS_MQ_OPEN SNR_MQ_UNLINK ScmpSyscall = SYS_MQ_UNLINK SNR_MQ_TIMEDSEND ScmpSyscall = SYS_MQ_TIMEDSEND SNR_MQ_TIMEDRECEIVE ScmpSyscall = SYS_MQ_TIMEDRECEIVE SNR_MQ_NOTIFY ScmpSyscall = SYS_MQ_NOTIFY SNR_MQ_GETSETATTR ScmpSyscall = SYS_MQ_GETSETATTR SNR_KEXEC_LOAD ScmpSyscall = SYS_KEXEC_LOAD SNR_WAITID ScmpSyscall = SYS_WAITID SNR_ADD_KEY ScmpSyscall = SYS_ADD_KEY SNR_REQUEST_KEY ScmpSyscall = SYS_REQUEST_KEY SNR_KEYCTL ScmpSyscall = SYS_KEYCTL SNR_IOPRIO_SET ScmpSyscall = SYS_IOPRIO_SET SNR_IOPRIO_GET ScmpSyscall = SYS_IOPRIO_GET SNR_INOTIFY_INIT ScmpSyscall = SYS_INOTIFY_INIT SNR_INOTIFY_ADD_WATCH ScmpSyscall = SYS_INOTIFY_ADD_WATCH SNR_INOTIFY_RM_WATCH ScmpSyscall = SYS_INOTIFY_RM_WATCH SNR_MIGRATE_PAGES ScmpSyscall = SYS_MIGRATE_PAGES SNR_OPENAT ScmpSyscall = SYS_OPENAT SNR_MKDIRAT ScmpSyscall = SYS_MKDIRAT SNR_MKNODAT ScmpSyscall = SYS_MKNODAT SNR_FCHOWNAT ScmpSyscall = SYS_FCHOWNAT SNR_FUTIMESAT ScmpSyscall = SYS_FUTIMESAT SNR_NEWFSTATAT ScmpSyscall = SYS_NEWFSTATAT SNR_UNLINKAT ScmpSyscall = SYS_UNLINKAT SNR_RENAMEAT ScmpSyscall = SYS_RENAMEAT SNR_LINKAT ScmpSyscall = SYS_LINKAT SNR_SYMLINKAT ScmpSyscall = SYS_SYMLINKAT SNR_READLINKAT ScmpSyscall = SYS_READLINKAT SNR_FCHMODAT ScmpSyscall = SYS_FCHMODAT SNR_FACCESSAT ScmpSyscall = SYS_FACCESSAT SNR_PSELECT6 ScmpSyscall = SYS_PSELECT6 SNR_PPOLL ScmpSyscall = SYS_PPOLL SNR_UNSHARE ScmpSyscall = SYS_UNSHARE SNR_SET_ROBUST_LIST ScmpSyscall = SYS_SET_ROBUST_LIST SNR_GET_ROBUST_LIST ScmpSyscall = SYS_GET_ROBUST_LIST SNR_SPLICE ScmpSyscall = SYS_SPLICE SNR_TEE ScmpSyscall = SYS_TEE SNR_SYNC_FILE_RANGE ScmpSyscall = SYS_SYNC_FILE_RANGE SNR_VMSPLICE ScmpSyscall = SYS_VMSPLICE SNR_MOVE_PAGES ScmpSyscall = SYS_MOVE_PAGES SNR_UTIMENSAT ScmpSyscall = SYS_UTIMENSAT SNR_EPOLL_PWAIT ScmpSyscall = SYS_EPOLL_PWAIT SNR_SIGNALFD ScmpSyscall = SYS_SIGNALFD SNR_TIMERFD_CREATE ScmpSyscall = SYS_TIMERFD_CREATE SNR_EVENTFD ScmpSyscall = SYS_EVENTFD SNR_FALLOCATE ScmpSyscall = SYS_FALLOCATE SNR_TIMERFD_SETTIME ScmpSyscall = SYS_TIMERFD_SETTIME SNR_TIMERFD_GETTIME ScmpSyscall = SYS_TIMERFD_GETTIME SNR_ACCEPT4 ScmpSyscall = SYS_ACCEPT4 SNR_SIGNALFD4 ScmpSyscall = SYS_SIGNALFD4 SNR_EVENTFD2 ScmpSyscall = SYS_EVENTFD2 SNR_EPOLL_CREATE1 ScmpSyscall = SYS_EPOLL_CREATE1 SNR_DUP3 ScmpSyscall = SYS_DUP3 SNR_PIPE2 ScmpSyscall = SYS_PIPE2 SNR_INOTIFY_INIT1 ScmpSyscall = SYS_INOTIFY_INIT1 SNR_PREADV ScmpSyscall = SYS_PREADV SNR_PWRITEV ScmpSyscall = SYS_PWRITEV SNR_RT_TGSIGQUEUEINFO ScmpSyscall = SYS_RT_TGSIGQUEUEINFO SNR_PERF_EVENT_OPEN ScmpSyscall = SYS_PERF_EVENT_OPEN SNR_RECVMMSG ScmpSyscall = SYS_RECVMMSG SNR_FANOTIFY_INIT ScmpSyscall = SYS_FANOTIFY_INIT SNR_FANOTIFY_MARK ScmpSyscall = SYS_FANOTIFY_MARK SNR_PRLIMIT64 ScmpSyscall = SYS_PRLIMIT64 SNR_NAME_TO_HANDLE_AT ScmpSyscall = SYS_NAME_TO_HANDLE_AT SNR_OPEN_BY_HANDLE_AT ScmpSyscall = SYS_OPEN_BY_HANDLE_AT SNR_CLOCK_ADJTIME ScmpSyscall = SYS_CLOCK_ADJTIME SNR_SYNCFS ScmpSyscall = SYS_SYNCFS SNR_SENDMMSG ScmpSyscall = SYS_SENDMMSG SNR_SETNS ScmpSyscall = SYS_SETNS SNR_GETCPU ScmpSyscall = SYS_GETCPU SNR_PROCESS_VM_READV ScmpSyscall = SYS_PROCESS_VM_READV SNR_PROCESS_VM_WRITEV ScmpSyscall = SYS_PROCESS_VM_WRITEV SNR_KCMP ScmpSyscall = SYS_KCMP SNR_FINIT_MODULE ScmpSyscall = SYS_FINIT_MODULE SNR_SCHED_SETATTR ScmpSyscall = SYS_SCHED_SETATTR SNR_SCHED_GETATTR ScmpSyscall = SYS_SCHED_GETATTR SNR_RENAMEAT2 ScmpSyscall = SYS_RENAMEAT2 SNR_SECCOMP ScmpSyscall = SYS_SECCOMP SNR_GETRANDOM ScmpSyscall = SYS_GETRANDOM SNR_MEMFD_CREATE ScmpSyscall = SYS_MEMFD_CREATE SNR_KEXEC_FILE_LOAD ScmpSyscall = SYS_KEXEC_FILE_LOAD SNR_BPF ScmpSyscall = SYS_BPF SNR_EXECVEAT ScmpSyscall = SYS_EXECVEAT SNR_USERFAULTFD ScmpSyscall = SYS_USERFAULTFD SNR_MEMBARRIER ScmpSyscall = SYS_MEMBARRIER SNR_MLOCK2 ScmpSyscall = SYS_MLOCK2 SNR_COPY_FILE_RANGE ScmpSyscall = SYS_COPY_FILE_RANGE SNR_PREADV2 ScmpSyscall = SYS_PREADV2 SNR_PWRITEV2 ScmpSyscall = SYS_PWRITEV2 SNR_PKEY_MPROTECT ScmpSyscall = SYS_PKEY_MPROTECT SNR_PKEY_ALLOC ScmpSyscall = SYS_PKEY_ALLOC SNR_PKEY_FREE ScmpSyscall = SYS_PKEY_FREE SNR_STATX ScmpSyscall = SYS_STATX SNR_IO_PGETEVENTS ScmpSyscall = SYS_IO_PGETEVENTS SNR_RSEQ ScmpSyscall = SYS_RSEQ SNR_URETPROBE ScmpSyscall = SYS_URETPROBE SNR_PIDFD_SEND_SIGNAL ScmpSyscall = SYS_PIDFD_SEND_SIGNAL SNR_IO_URING_SETUP ScmpSyscall = SYS_IO_URING_SETUP SNR_IO_URING_ENTER ScmpSyscall = SYS_IO_URING_ENTER SNR_IO_URING_REGISTER ScmpSyscall = SYS_IO_URING_REGISTER SNR_OPEN_TREE ScmpSyscall = SYS_OPEN_TREE SNR_MOVE_MOUNT ScmpSyscall = SYS_MOVE_MOUNT SNR_FSOPEN ScmpSyscall = SYS_FSOPEN SNR_FSCONFIG ScmpSyscall = SYS_FSCONFIG SNR_FSMOUNT ScmpSyscall = SYS_FSMOUNT SNR_FSPICK ScmpSyscall = SYS_FSPICK SNR_PIDFD_OPEN ScmpSyscall = SYS_PIDFD_OPEN SNR_CLONE3 ScmpSyscall = SYS_CLONE3 SNR_CLOSE_RANGE ScmpSyscall = SYS_CLOSE_RANGE SNR_OPENAT2 ScmpSyscall = SYS_OPENAT2 SNR_PIDFD_GETFD ScmpSyscall = SYS_PIDFD_GETFD SNR_FACCESSAT2 ScmpSyscall = SYS_FACCESSAT2 SNR_PROCESS_MADVISE ScmpSyscall = SYS_PROCESS_MADVISE SNR_EPOLL_PWAIT2 ScmpSyscall = SYS_EPOLL_PWAIT2 SNR_MOUNT_SETATTR ScmpSyscall = SYS_MOUNT_SETATTR SNR_QUOTACTL_FD ScmpSyscall = SYS_QUOTACTL_FD SNR_LANDLOCK_CREATE_RULESET ScmpSyscall = SYS_LANDLOCK_CREATE_RULESET SNR_LANDLOCK_ADD_RULE ScmpSyscall = SYS_LANDLOCK_ADD_RULE SNR_LANDLOCK_RESTRICT_SELF ScmpSyscall = SYS_LANDLOCK_RESTRICT_SELF SNR_MEMFD_SECRET ScmpSyscall = SYS_MEMFD_SECRET SNR_PROCESS_MRELEASE ScmpSyscall = SYS_PROCESS_MRELEASE SNR_FUTEX_WAITV ScmpSyscall = SYS_FUTEX_WAITV SNR_SET_MEMPOLICY_HOME_NODE ScmpSyscall = SYS_SET_MEMPOLICY_HOME_NODE SNR_CACHESTAT ScmpSyscall = SYS_CACHESTAT SNR_FCHMODAT2 ScmpSyscall = SYS_FCHMODAT2 SNR_MAP_SHADOW_STACK ScmpSyscall = SYS_MAP_SHADOW_STACK SNR_FUTEX_WAKE ScmpSyscall = SYS_FUTEX_WAKE SNR_FUTEX_WAIT ScmpSyscall = SYS_FUTEX_WAIT SNR_FUTEX_REQUEUE ScmpSyscall = SYS_FUTEX_REQUEUE SNR_STATMOUNT ScmpSyscall = SYS_STATMOUNT SNR_LISTMOUNT ScmpSyscall = SYS_LISTMOUNT SNR_LSM_GET_SELF_ATTR ScmpSyscall = SYS_LSM_GET_SELF_ATTR SNR_LSM_SET_SELF_ATTR ScmpSyscall = SYS_LSM_SET_SELF_ATTR SNR_LSM_LIST_MODULES ScmpSyscall = SYS_LSM_LIST_MODULES SNR_MSEAL ScmpSyscall = SYS_MSEAL )
func SyscallResolveName ¶
func SyscallResolveName(name string) (num ScmpSyscall, ok bool)
SyscallResolveName resolves a syscall number from its string representation.
func (*ScmpSyscall) MarshalJSON ¶
func (num *ScmpSyscall) MarshalJSON() ([]byte, error)
MarshalJSON resolves the name of ScmpSyscall and encodes it as a json string. If such a name does not exist, the syscall number is encoded instead.
func (*ScmpSyscall) UnmarshalJSON ¶
func (num *ScmpSyscall) UnmarshalJSON(data []byte) error
UnmarshalJSON looks up the syscall number corresponding to name encoded in data by calling SyscallResolveName.
type SyscallNameError ¶
type SyscallNameError string
SyscallNameError is returned when trying to unmarshal an invalid syscall name into ScmpSyscall.
func (SyscallNameError) Error ¶
func (e SyscallNameError) Error() string