Ophestra 31aef905fa sandbox: expose seccomp interface ...

There's no point in artificially limiting and abstracting away these options. The higher level hakurei package is responsible for providing a secure baseline and sane defaults. The sandbox package should present everything to the caller.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-07-02 04:47:13 +09:00

..

libseccomp_test.go

sandbox/seccomp: prepare -> export

2025-07-02 00:32:48 +09:00

libseccomp-helper.c

sandbox/seccomp: prepare -> export

2025-07-02 00:32:48 +09:00

libseccomp-helper.h

sandbox/seccomp: prepare -> export

2025-07-02 00:32:48 +09:00

libseccomp.go

sandbox: expose seccomp interface

2025-07-02 04:47:13 +09:00

mksysnum_linux.pl

sandbox/seccomp: emit syscall constants

2025-06-30 20:34:33 +09:00

presets_clone_backwards2.go

sandbox/seccomp: resolve rules natively

2025-07-01 22:11:32 +09:00

presets_clone_generic.go

sandbox/seccomp: resolve rules natively

2025-07-01 22:11:32 +09:00

presets.go

sandbox/seccomp: prepare -> export

2025-07-02 00:32:48 +09:00

proc.go

sandbox/seccomp: prepare -> export

2025-07-02 00:32:48 +09:00

seccomp_test.go

treewide: rename to hakurei

2025-06-25 04:57:41 +09:00

seccomp.go

sandbox/seccomp: prepare -> export

2025-07-02 00:32:48 +09:00

syscall_extra_linux_amd64.go

sandbox/seccomp: extra constants

2025-07-01 20:15:42 +09:00

syscall_linux_amd64.go

sandbox/seccomp: emit syscall constants

2025-06-30 20:34:33 +09:00

syscall_test.go

sandbox/seccomp: implement syscall lookup

2025-07-01 00:35:27 +09:00

syscall.go

sandbox/seccomp: implement syscall lookup

2025-07-01 00:35:27 +09:00