mvo5/libseccomp-golang forked from seccomp/libseccomp-golang

golang: Add support for SCMP_ACT_LOG

Represent libseccomp's SCMP_ACT_LOG action with ActLog. This action logs
before allowing the syscall.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>

It appears the CGo did not like the use of preprocessor
constants in return. Assign them to variables before using
them to fix this.

Also fixes tab size in some CGo code

Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

In the upstream library, when added with a single API call,
multiple syscall argument rules should be matched with AND
logic - if all of them match, the rule matches.

At present, the Golang bindings apply OR logic to this case.
This commit resolves this and reverts to the behavior of the
main library.

Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

Go's extensive use of threading makes installing Seccomp filters
without TSync set have strong potential for unexpected
behavior. Setting TSync unconditionally ensures expected behavior.
This commit bumps the minimum supported library version to v2.2.0
to ensure support for TSync.

Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

* add three C functions to retrieve the major, minor and micro
  version values from `seccomp_version()` when that's available
  under v2.3.x or newer
* has to change type from `int` to `uint` as that's the type
  used in `struct scmp_version`

Signed-off-by: K.C. Wong <kcwong@verseon.com>
[MH: Tweaked commit message]
Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

Signed-off-by: Paul Moore <paul@paul-moore.com>

Signed-off-by: Paul Moore <paul@paul-moore.com>

Signed-off-by: Paul Moore <paul@paul-moore.com>

See GH issue #2 for more information:

 * seccomp#2

Suggested-by: Thordur Bjornsson <thorduri@secnorth.net>
Signed-off-by: Paul Moore <paul@paul-moore.com>

I missed this earlier.

Signed-off-by: Paul Moore <paul@paul-moore.com>

Another nit picky commit.

Signed-off-by: Paul Moore <paul@paul-moore.com>

I'm nit picky about these things.

Signed-off-by: Paul Moore <paul@paul-moore.com>

Recipes are loosely based on the libseccomp project,
e.g. `check`, `check-build`, `check-syntax` are present.
Additonally `fix-syntax`, `vet` and `lint` are provided.

Add documentation blurbs to the README, again loosely
based on the libseccomp project README.

Addresses GH issue #1.

Signed-off-by: Thordur Bjornsson <thorduri@secnorth.net>
[PM: tweaked subject line, made GH references more clear]
Signed-off-by: Paul Moore <paul@paul-moore.com>

Signed-off-by: Thordur Bjornsson <thorduri@secnorth.net>
Signed-off-by: Paul Moore <paul@paul-moore.com>

Introduce `ensureSupportedVersion()`, and call it in the exported
API functions where appropriate before attempting operations, and
return a `VersionError` if the system libseccomp is to old.

Use `VersionError` in a few other appropriate places as well.

Fixes GH issue #11, supersedes GH PR #6.

Signed-off-by: Thordur Bjornsson thorduri@secnorth.net
[PM: fixed up patch subject line, made GH reference more clear]
Signed-off-by: Paul Moore <paul@paul-moore.com>

Signed-off-by: Michael Holzheu <holzheu@linux.vnet.ibm.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

Adds the POWER and System z variants that exist in the libseccomp master
branch to the golang consts/functions.

Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>

Not all distributions package libseccomp in the same way, but pkg-config
allows the same configuration to work on different distributions. Switch
to using pkg-config to automatically figure out what the correct
commandline flags are for libseccomp.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
Signed-off-by: Paul Moore <paul@paul-moore.com>

Signed-off-by: Wang Qilin wangqilin2@huawei.com
Signed-off-by: Paul Moore <paul@paul-moore.com>

At present, the bindings require v2.2.1 of libseccomp to build. This patch
allows the use of earlier versions of the library.

Adds a function to the public API of the Golang bindings to retrieve the
library version the bindings were built against.

Many comments and error messages throughout receive slight updates to fix
warnings identified by Golint. In general, all error messages begin with
lowercase letters and do not end in punctuation, and all comments on exported
functions and constants begin with the name of the function/variable.

Signed-off-by: Matthew Heon <mheon@redhat.com>
Signed-off-by: Paul Moore <pmoore@redhat.com>

Signed-off-by: Matthew Heon <mheon@redhat.com>
[PM: tweaked subject line]
Signed-off-by: Paul Moore <pmoore@redhat.com>

Signed-off-by: Matthew Heon <mheon@redhat.com>
[PM: minor style tweaks to the LICENSE file]
Signed-off-by: Paul Moore <pmoore@redhat.com>

Provide some basics of the libseccomp project and the intent of this
repository.  I expect the README file to change as this repository
is populated.

Signed-off-by: Paul Moore <pmoore@redhat.com>

Signed-off-by: Paul Moore <pmoore@redhat.com>