New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[RFE] support for seccomp default errno return code #2943

Closed

giuseppe opened this issue May 6, 2021 · 0 comments · Fixed by #2954

Labels

area/seccomp enhancement

Member

giuseppe commented May 6, 2021

Allow to override the default errno for seccomp actions.

It was added to the OCI runtime specs with: opencontainers/runtime-spec#1087

AkihiroSuda added area/seccomp enhancement labels

giuseppe added a commit to giuseppe/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

9ad5e29

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

giuseppe mentioned this issue

libcontainer: honor seccomp defaultErrnoRet #2954

Merged

giuseppe added a commit to giuseppe/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

f2de86c

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

giuseppe added a commit to giuseppe/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

c7d595f

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

giuseppe added a commit to giuseppe/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

14850e3

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

giuseppe added a commit to giuseppe/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

62adfe4

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

giuseppe added a commit to giuseppe/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

de6727a

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

cyphar closed this as completed in

c61f606

AdamKorcz pushed a commit to AdamKorcz/runc that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

adbed52

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

dims pushed a commit to dims/libcontainer that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

3bdf75a

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers/runc#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

dims pushed a commit to dims/libcontainer that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

33acb58

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers/runc#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

dims pushed a commit to dims/libcontainer that referenced this issue


          libcontainer: honor seccomp defaultErrnoRet

b6afab5

opencontainers/runtime-spec#1087 added support
for defaultErrnoRet to the OCI runtime specs.

If a defaultErrnoRet is specified, disable patching the generated
libseccomp cBPF.

Closes: opencontainers/runc#2943

Signed-off-by: Giuseppe Scrivano <[email protected]>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment