sandbox/seccomp: syscall name lookup table

The script is from Go source of same name. The result is checked against libseccomp.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
2025-06-26 03:48:15 +09:00
parent 863bf69ad3
commit 9a8a047908
5 changed files with 487 additions and 0 deletions

View File

@@ -184,6 +184,16 @@
exec cat ${docText} > options.md
'';
};
generateSyscallTable = pkgs.mkShell {
# this should be made cross-platform via nix
shellHook = ''
exec ${pkgs.perl}/bin/perl \
sandbox/seccomp/mksysnum_linux.pl \
${pkgs.linuxHeaders}/include/asm/unistd_64.h > \
sandbox/seccomp/syscall_linux_amd64.go
'';
};
}
);
};