Skip to content

Commit

Permalink
Merge pull request #705 from q384566678/test-seecomp
Browse files Browse the repository at this point in the history
Add new architectures from libseccomp 2.3.2
  • Loading branch information
Mrunal Patel authored Mar 3, 2017
2 parents 7da699d + 513ab68 commit f47e43c
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 2 deletions.
4 changes: 3 additions & 1 deletion config-linux.md
Original file line number Diff line number Diff line change
Expand Up @@ -496,7 +496,7 @@ Seccomp provides application sandboxing mechanism in the Linux kernel.
Seccomp configuration allows one to configure actions to take for matched syscalls and furthermore also allows matching on values passed as arguments to syscalls.
For more information about Seccomp, see [Seccomp kernel documentation](https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt)
The actions, architectures, and operators are strings that match the definitions in seccomp.h from [libseccomp](https://github.com/seccomp/libseccomp) and are translated to corresponding values.
A valid list of constants as of libseccomp v2.3.0 is shown below.
A valid list of constants as of libseccomp v2.3.2 is shown below.

Architecture Constants
* `SCMP_ARCH_X86`
Expand All @@ -515,6 +515,8 @@ Architecture Constants
* `SCMP_ARCH_PPC64LE`
* `SCMP_ARCH_S390`
* `SCMP_ARCH_S390X`
* `SCMP_ARCH_PARISC`
* `SCMP_ARCH_PARISC64`

Action Constants:
* `SCMP_ACT_KILL`
Expand Down
4 changes: 3 additions & 1 deletion schema/defs-linux.json
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,9 @@
"SCMP_ARCH_PPC64",
"SCMP_ARCH_PPC64LE",
"SCMP_ARCH_S390",
"SCMP_ARCH_S390X"
"SCMP_ARCH_S390X",
"SCMP_ARCH_PARISC",
"SCMP_ARCH_PARISC64"
]
},
"SeccompAction": {
Expand Down
2 changes: 2 additions & 0 deletions specs-go/config.go
Original file line number Diff line number Diff line change
Expand Up @@ -506,6 +506,8 @@ const (
ArchPPC64LE Arch = "SCMP_ARCH_PPC64LE"
ArchS390 Arch = "SCMP_ARCH_S390"
ArchS390X Arch = "SCMP_ARCH_S390X"
ArchPARISC Arch = "SCMP_ARCH_PARISC"
ArchPARISC64 Arch = "SCMP_ARCH_PARISC64"
)

// LinuxSeccompAction taken upon Seccomp rule match
Expand Down

0 comments on commit f47e43c

Please sign in to comment.