# Functions
DefaultProfile defines the allowlist for the default seccomp profile.
GetDefaultProfile returns an error on unsuppored systems.
GoArchToSeccompArch converts a runtime.GOARCH to a seccomp `Arch`.
IsEnabled returns true if seccomp is enabled for the host.
IsSupported returns true if the system has been configured to support seccomp.
LoadProfile returns an error on unsuppored systems.
LoadProfileFromBytes takes a byte slice and decodes the seccomp profile.
LoadProfileFromConfig takes a Seccomp struct and a spec to retrieve a LinuxSeccomp.
# Constants
Define actions for Seccomp rules.
Define actions for Seccomp rules.
ActKill results in termination of the thread that made the system call.
ActKillProcess results in termination of the entire process.
ActKillThread kills the thread that violated the rule.
Define actions for Seccomp rules.
Define actions for Seccomp rules.
Define actions for Seccomp rules.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Additional architectures permitted to be used for system calls By default only the native architecture of the kernel is permitted.
Define operators for syscall arguments in Seccomp.
Define operators for syscall arguments in Seccomp.
Define operators for syscall arguments in Seccomp.
Define operators for syscall arguments in Seccomp.
Define operators for syscall arguments in Seccomp.
Define operators for syscall arguments in Seccomp.
Define operators for syscall arguments in Seccomp.
# Structs
Architecture is used to represent a specific architecture and its sub-architectures.
Arg used for matching specific syscall arguments in Seccomp.
Filter is used to conditionally apply Seccomp rules.
Seccomp represents the config for a seccomp profile for syscall restriction.
Syscall is used to match a group of syscalls in Seccomp.