Commits on Apr 10, 2021

1. seccomp: Allow specification of syscalls as numbers …

   The motivation here is the same as moby/moby#41671, which was closed
   as requiring a spec change (hence this PR). In short, certain applications use high syscall numbers
   (e.g. 1000+) for private communication with an associated ptracer. Since these are not real syscalls,
   there is no corresponding string mapping for them in the runtime. Currently users simply run such
   applications in privileged containers, which is of course the absolute worst option. I would like to be
   able to provide these users a seccomp profile that works, but without being able to specify these
   pseudo-syscalls by number, this is not possible.

   

   Keno authored Apr 10, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for a19e92e
   • Browse repository at this point

   Copy the full SHA

   a19e92e View commit details

   Browse the repository at this point in the history