Ian: Rework the seccomp filter

sandstormports / community-project

Tracking our collaborative progress as a team

3 stars 1 forks source link

Open zenhack opened 3 years ago

zenhack commented 3 years ago

On the bpf_asm branch on my fork I have some WIP on two related things:

Converting the seccomp filter from libseccomp to bpf assembly (https://github.com/sandstorm-io/sandstorm/issues/2989)
Make it into a whitelist, rather than a blacklist.

zenhack commented 3 years ago

The branch was merged a while back, but the new filter still needs some adjustments before it can run all existing apps.