alegrey91 / harpoon

🔍 Trace syscalls from user-space functions, by using eBPF
Apache License 2.0
88 stars 3 forks source link

implement command to create seccomp profile #9

Closed alegrey91 closed 3 months ago

alegrey91 commented 6 months ago

The idea is to create a command like the following:

harpoon build --type=seccomp ...

This new feature should give the ability of creating a seccomp profile by combining together all the system calls collected with the command capture and/or hunt. The sub-command name should be something like assemble, build,generate, or provide. Additionally, I was thinking to add the flag -t/--type in case we want to support different types like systemd services (that make use of seccomp as well with the following label SystemCallFilter=.