cri-o/test/checkseccomp/checkseccomp.go

package main

import (
	"os"

	"golang.org/x/sys/unix"
)

const (
	// SeccompModeFilter refers to the unix argument SECCOMP_MODE_FILTER.
	SeccompModeFilter = uintptr(2)
)

func main() {
	// Check if Seccomp is supported, via CONFIG_SECCOMP.
	if _, _, err := unix.RawSyscall(unix.SYS_PRCTL, unix.PR_GET_SECCOMP, 0, 0); err != unix.EINVAL {
		// Make sure the kernel has CONFIG_SECCOMP_FILTER.
		if _, _, err := unix.RawSyscall(unix.SYS_PRCTL, unix.PR_SET_SECCOMP, SeccompModeFilter, 0); err != unix.EINVAL {
			os.Exit(0)
		}
	}
	os.Exit(1)
}