]> git.proxmox.com Git - mirror_libseccomp.git/commit
all: add support for new log filter flag
authorTyler Hicks <tyhicks@canonical.com>
Wed, 18 Oct 2017 06:16:52 +0000 (06:16 +0000)
committerPaul Moore <paul@paul-moore.com>
Wed, 1 Nov 2017 16:48:14 +0000 (12:48 -0400)
commitd0e11951f6484db5d8e98591ddc0c0157b333d85
tree0402519270e14ee916dfa31503505bc49037bdd7
parent8a8576c9e0cf463d2d624686a4e57058ae30e91a
all: add support for new log filter flag

Extend libseccomp to support SECCOMP_FILTER_FLAG_LOG, which is intended
to cause log events for all actions taken by a filter except for
SCMP_ACT_ALLOW actions. This is done via a new filter attribute called
SCMP_FLTATR_CTL_LOG that is off by default.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
14 files changed:
doc/man/man3/seccomp_api_get.3
doc/man/man3/seccomp_attr_set.3
include/seccomp.h.in
src/api.c
src/db.c
src/db.h
src/python/libseccomp.pxd
src/python/seccomp.pyx
src/system.c
src/system.h
tests/13-basic-attrs.c
tests/13-basic-attrs.py
tests/39-basic-api_level.c
tests/39-basic-api_level.py