From 9a8a0479084913f1b835e65e5e9f900e4cd9dbf7 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Thu, 26 Jun 2025 03:48:15 +0900 Subject: sandbox/seccomp: syscall name lookup table The script is from Go source of same name. The result is checked against libseccomp. Signed-off-by: Ophestra --- sandbox/seccomp/seccomp.go | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'sandbox/seccomp/seccomp.go') diff --git a/sandbox/seccomp/seccomp.go b/sandbox/seccomp/seccomp.go index f897ee5f..c9a201e2 100644 --- a/sandbox/seccomp/seccomp.go +++ b/sandbox/seccomp/seccomp.go @@ -13,6 +13,7 @@ import ( "fmt" "runtime" "syscall" + "unsafe" ) // LibraryError represents a libseccomp error. @@ -114,3 +115,11 @@ func buildFilter(fd int, opts FilterOpts) error { } return err } + +// only used for testing +func syscallResolveName(s string) (trap int) { + v := C.CString(s) + trap = int(C.seccomp_syscall_resolve_name(v)) + C.free(unsafe.Pointer(v)) + return +} -- cgit v1.3.1