From 9a8a0479084913f1b835e65e5e9f900e4cd9dbf7 Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Thu, 26 Jun 2025 03:48:15 +0900
Subject: sandbox/seccomp: syscall name lookup table

The script is from Go source of same name. The result is checked against libseccomp.

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 flake.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'flake.nix')

diff --git a/flake.nix b/flake.nix
index 3da6136b..717dea23 100644
--- a/flake.nix
+++ b/flake.nix
@@ -184,6 +184,16 @@
                 exec cat ${docText} > options.md
               '';
             };
+
+          generateSyscallTable = pkgs.mkShell {
+            # this should be made cross-platform via nix
+            shellHook = ''
+              exec ${pkgs.perl}/bin/perl \
+                sandbox/seccomp/mksysnum_linux.pl \
+                ${pkgs.linuxHeaders}/include/asm/unistd_64.h > \
+                sandbox/seccomp/syscall_linux_amd64.go
+            '';
+          };
         }
       );
     };
-- 
cgit v1.3.1