hakurei/helper/seccomp/api.go, branch develop low-level userspace tooling for Rosa OS http://src.rosa.moe/hakurei/atom/helper/seccomp/api.go?h=develop 2025-03-14T13:42:40Z seccomp: move out of helper 2025-03-14T13:42:40Z Ophestra cat@gensokyo.uk 2025-03-14T13:42:40Z urn:sha1:2647a71be1f287e50011a65653b9e9c806627899 Signed-off-by: Ophestra <cat@gensokyo.uk> helper/seccomp: seccomp_load on negative fd 2025-03-12T06:18:52Z Ophestra cat@gensokyo.uk 2025-03-12T06:18:52Z urn:sha1:be16970e770554b3c2191da41eb9bd4472b323e4 Signed-off-by: Ophestra <cat@gensokyo.uk> helper: use generic extra files interface 2025-02-13T14:34:15Z Ophestra cat@gensokyo.uk 2025-02-13T14:15:34Z urn:sha1:fe7d208cf76fa6f24bb9d12ba29b5ed61d837ce3 This replaces the pipes object and integrates context into helper process lifecycle. Signed-off-by: Ophestra <cat@gensokyo.uk> helper/seccomp: implement reader interface via pipe 2025-02-03T10:43:03Z Ophestra cat@gensokyo.uk 2025-02-03T09:10:29Z urn:sha1:5b7b3fa9a4d8ca4ad08d6648752e28ee66f0ffae This also does not require the libc tmpfile call. BPF programs emitted by libseccomp seems to be deterministic. The tests would catch regressions as it verifies the program against known good output backed by manual testing. Signed-off-by: Ophestra <cat@gensokyo.uk>