Akihiro Suda a6e52c74fa seccomp: kernel 6.7 ...

The following syscalls were added since kernel v5.16:
- v5.17 (libseccomp v2.5.4): set_mempolicy_home_node
- v6.5  (libseccomp v2.5.5): cachestat
- v6.6  (libseccomp v2.5.5): fchmodat2, map_shadow_stack
- v6.7  (libseccomp v2.5.5): futex_wake, futex_wait, futex_requeue

[Not covered in this commit]
- v6.8-rc1: statmount, listmount, lsm_get_self_attr, lsm_set_self_attr, lsm_list_modules

ref:
- `syscalls: update the syscall list for Linux v5.17` (libseccomp v2.5.4)
   d83cb7ac25
- `all: update the syscall table for Linux v6.7-rc3`  (libseccomp v2.5.5)
   53267af3fb

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>

2024-01-24 18:35:41 +09:00

..

kernelversion

allow ptrace(2) by default for kernel >= 4.8

2022-04-18 20:45:29 +00:00

seccomp_default_test.go

Don't allow io_uring related syscalls in the RuntimeDefault seccomp profile.

2023-11-02 01:23:58 +00:00

seccomp_default_unsupported.go

chore: use go fix to cleanup old +build buildtag

2022-12-29 14:25:14 +08:00

seccomp_default.go

seccomp: kernel 6.7

2024-01-24 18:35:41 +09:00

seccomp.go

Move oci to pkg/oci

2024-01-17 09:55:48 -08:00