-
Test Liberty InstantOn restore on Amazon EKS.
App checkpoint image was built on `stg.icr.io/cp/olc/open-liberty-vnext:24.0.0.11-full-java21-openj9-ubi-minimal`.
Restore the checkpoint app image …
-
```
ALLOWED pacman signal comm=pkill requested_mask=send denied_mask=send signal=term peer=mullvad-gui
DENIED mullvad-gui signal comm=pkill requested_mask=receive denied_mask=receive signal=term pe…
-
See [libseccomp](http://lwn.net/Articles/494252/).
It shouldn't be too hard to wrap this in ctypes or Cython.
After we have started the server, created its log file, the vfb and all the clients,…
-
## What is the Problem Being Solved?
[seccomp(2)](https://en.wikipedia.org/wiki/Seccomp) is a Linux kernel facility that allows a process to voluntarily give up access to nearly everything. Once in…
-
hexchat oz profile seems to break:
audit: type=1326 audit(1455472006.821:70): auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=6270 comm="hexchat" exe="/usr/bin-oz/hexchat" sig=31 arch=c000003e s…
ghost updated
7 years ago
-
**Expected Behaviour**
We want to replicate the profile we use for deploying a chromium container using https://github.com/Zenika/alpine-chrome
We use the flag `--security-opt seccomp=$(pwd)/chrome.j…
-
I've just been playing around randomly with this library and noticed it doesn't seem to support the notify API?
* https://brauner.github.io/2020/07/23/seccomp-notify.html
* https://github.com/secc…
-
Hi,
When developing custom seccmop profiles, it can be frustrating to track down missing syscalls. Even after using strace or sysdig to list all the syscalls made + using the list mentioned over h…
-
**Description**
I would like to have support for the secomp rule action: `SCMP_ACT_LOG` which is mentioned here: http://man7.org/linux/man-pages/man3/seccomp_rule_add.3.html
It would be cool t…
-
We need an easier way to keep the seccomp filters in sync between flatpak and all the other projects that want the exact same set of seccomp filters that flatpak uses (notably WebKit and gnome-desktop…