proxmox-mirrors/mirror_lxc
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_lxc synced 2025-08-04 18:14:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

lxccontainer.h: document seccomp_notify_fd()

Browse Source 
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
This commit is contained in:
Christian Brauner 2020-03-11 13:04:18 +01:00
parent a804c19ba5
commit 890ecf0860
No known key found for this signature in database
GPG Key ID: 8EB056D53EECB12D
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/api-extensions.md
View File

@ -46,6 +46,8 @@ the kernel will generate a poll event and send a message over the file descripto
The caller can read this message, inspect the syscalls including its arguments. Based on this information the caller is expected to send back a message informing the kernel which action to take. Until that message is sent the kernel will block the calling process. The format of the messages to read and sent is documented in seccomp itself.
A new API function `seccomp_notify_fd()` has been added which allows callers to retrieve the notifier fd for the container's seccomp filter.
## network\_veth\_routes
This introduces the `lxc.net.[i].veth.ipv4.route` and `lxc.net.[i].veth.ipv6.route` properties

7
src/lxc/lxccontainer.h
View File

@ -848,6 +848,13 @@ struct lxc_container {
int (*umount)(struct lxc_container *c, const char *target,
unsigned long mountflags, struct lxc_mount *mnt);
/*!
* \brief Retrieve a file descriptor for the container's seccomp filter.
*
* \param c Container
*
* \return file descriptor for container's seccomp filter
*/
int (*seccomp_notify_fd)(struct lxc_container *c);
};