diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-07-01 20:23:33 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-07-01 22:11:32 +0900 |
| commit | 1a8840bebc673672235b6e10b1b9386f24751757 (patch) | |
| tree | d1e6772bfd685e2162d047e3640bd3ee55c1a1f7 /sandbox/seccomp/seccomp-build.h | |
| parent | 1fb453dffe4c83866fedfa4590be30ec65e815ff (diff) | |
sandbox/seccomp: resolve rules natively
This enables loading syscall filter policies from external cross-platform config files.
This also removes a significant amount of C code.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'sandbox/seccomp/seccomp-build.h')
| -rw-r--r-- | sandbox/seccomp/seccomp-build.h | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/sandbox/seccomp/seccomp-build.h b/sandbox/seccomp/seccomp-build.h deleted file mode 100644 index 324e6d23..00000000 --- a/sandbox/seccomp/seccomp-build.h +++ /dev/null @@ -1,23 +0,0 @@ -#include <seccomp.h> -#include <stdint.h> - -#if (SCMP_VER_MAJOR < 2) || (SCMP_VER_MAJOR == 2 && SCMP_VER_MINOR < 5) || \ - (SCMP_VER_MAJOR == 2 && SCMP_VER_MINOR == 5 && SCMP_VER_MICRO < 1) -#error This package requires libseccomp >= v2.5.1 -#endif - -typedef enum { - HAKUREI_VERBOSE = 1 << 0, - HAKUREI_EXT = 1 << 1, - HAKUREI_DENY_NS = 1 << 2, - HAKUREI_DENY_TTY = 1 << 3, - HAKUREI_DENY_DEVEL = 1 << 4, - HAKUREI_MULTIARCH = 1 << 5, - HAKUREI_LINUX32 = 1 << 6, - HAKUREI_CAN = 1 << 7, - HAKUREI_BLUETOOTH = 1 << 8, -} hakurei_filter_opts; - -extern void hakurei_println(char *v); -int32_t hakurei_build_filter(int *ret_p, int fd, uint32_t arch, - uint32_t multiarch, hakurei_filter_opts opts);
\ No newline at end of file |