vbatts/cri-o
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

test: add a custom binary to reliable check seccomp support

Browse source 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
This commit is contained in:
Antonio Murdaca 2017-01-19 18:10:47 +01:00
parent f1f5c635d2
commit 0d37c41521
No known key found for this signature in database
GPG key ID: B2BEAD150DE936B9
4 changed files with 35 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
test/checkseccomp/Makefile Normal file
View file

@ -0,0 +1,6 @@
checkseccomp: $(wildcard *.go)
go build -o $@
.PHONY: clean
clean:
rm -f checkseccomp

22
test/checkseccomp/checkseccomp.go Normal file
View file

@ -0,0 +1,22 @@
package main
import (
"os"
"syscall"
)
const (
// SeccompModeFilter refers to the syscall argument SECCOMP_MODE_FILTER.
SeccompModeFilter = uintptr(2)
)
func main() {
// Check if Seccomp is supported, via CONFIG_SECCOMP.
if _, _, err := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_GET_SECCOMP, 0, 0); err != syscall.EINVAL {
// Make sure the kernel has CONFIG_SECCOMP_FILTER.
if _, _, err := syscall.RawSyscall(syscall.SYS_PRCTL, syscall.PR_SET_SECCOMP, SeccompModeFilter, 0); err != syscall.EINVAL {
os.Exit(0)
}
}
os.Exit(1)
}