diff options
Diffstat (limited to 'fst')
| -rw-r--r-- | fst/config.go | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/fst/config.go b/fst/config.go index 7075c6a0..171c29f7 100644 --- a/fst/config.go +++ b/fst/config.go @@ -31,6 +31,8 @@ type ConfinementConfig struct { Outer string `json:"home"` // bwrap sandbox confinement configuration Sandbox *SandboxConfig `json:"sandbox"` + // seccomp syscall filter configuration + Syscall *SyscallConfig `json:"syscall"` // extra acl entries to append ExtraPerms []*ExtraPermConfig `json:"extra_perms,omitempty"` @@ -45,6 +47,14 @@ type ConfinementConfig struct { Enablements system.Enablements `json:"enablements"` } +type SyscallConfig struct { + DenyDevel bool `json:"deny_devel"` + Multiarch bool `json:"multiarch"` + Linux32 bool `json:"linux32"` + Can bool `json:"can"` + Bluetooth bool `json:"bluetooth"` +} + type ExtraPermConfig struct { Ensure bool `json:"ensure,omitempty"` Path string `json:"path"` |