aboutgitcodelistschat:MatrixIRC
path: root/seitan.c
Commit message (Collapse)AuthorAgeFilesLines
* seitan: use functions from util.hAlice Frosi2023-04-251-6/+7
|
* seitan: remove unused optionsAlice Frosi2023-04-251-108/+3
|
* Replace argp with getoptAlice Frosi2023-04-201-52/+53
|
* seitan: use die function to terminate on errorAlice Frosi2023-03-281-18/+10
|
* seitan: remove unused variables and functionsAlice Frosi2023-03-241-64/+1
| | | | This was a left over of the previous version
* Replace errExit with dieAlice Frosi2023-03-241-16/+12
|
* Re-arrange repository structureAlice Frosi2023-03-241-0/+435
|
* Re-organize project and add license headerAlice Frosi2023-03-241-435/+0
|
* filter: add logging modeAlice Frosi2023-03-231-29/+40
| | | | | The logging mode creates a BPF filter where all the syscalls trigger a notification to the seccomp notifier.
* seitan: receiving seccomp notifier with socketAlice Frosi2023-03-231-22/+126
| | | | | | | | OCI spec and container runtimes expect to send the seccomp notifer fd through a unix socket. This mode is complementary of retrieving the file descriptor using the pid of the target process. Add option to log the syscalls.
* fix formattingAlice Frosi2023-02-221-27/+33
|
* seitan: separate function in commonAlice Frosi2023-02-151-50/+5
| | | | | | | Move find_fd_seccomp_notifier to common.c to be reused in other places. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* seitan: find fd of seccomp noitifier from procAlice Frosi2023-01-191-1/+55
| | | | | | | Instead of assuming that the fd of the notifier is always 3, find the correct fd from procfs. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* Use signals instead of connect for synchronizationAlice Frosi2023-01-171-0/+16
| | | | | | | | | | The connect syscall was used to synchronize seitan and the eater for the seccomp installation filter and notifier initialization. However, we assume that the fd 0 is always free, and this might not always be the case. Try to implement an alternative and more robust solution. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* seitan: replace ioctl with epollAlice Frosi2023-01-171-14/+41
| | | | | | Repeatedly listen for seccomp notification events using epoll. Signed-off-by: Alice Frosi <afrosi@redhat.com>
* seitan: add flags for pid and input fileAlice Frosi2023-01-171-3/+51
| | | | | | | | Avoid hardcoded values and set the option from command line: Example: ./seitan -i action -p 1234 Signed-off-by: Alice Frosi <afrosi@redhat.com>
* Rename loader to eaterAlice Frosi2023-01-161-2/+2
| | | | Signed-off-by: Alice Frosi <afrosi@redhat.com>
* seitan: Read the rest of the netlink message on event mismatchStefano Brivio2022-11-031-4/+3
| | | | | | | ...the PROC_EVENT_EXEC we're looking for might be hiding there. Also, avoid a possible endless loop on NLMSG_NOOP. Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
* seitan: Initial importStefano Brivio2022-10-251-0/+215
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-08 22:16:21 +0000