1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
package bypass4netns
import (
"fmt"
"syscall"
"unsafe"
libseccomp "github.com/seccomp/libseccomp-golang"
"github.com/vtolstov/go-ioctl"
)
const (
SeccompAddFdFlagSetFd = 1
SeccompUserNotifFlagContinue = 1
SeccompIocMagic = '!'
)
func seccompIOW(nr, typ uintptr) uintptr {
return ioctl.IOW(uintptr(SeccompIocMagic), nr, typ)
}
// C.SECCOMP_IOCTL_NOTIF_ADDFD become error
// Error Message: could not determine kind of name for C.SECCOMP_IOCTL_NOTIF_ADDFD
// TODO: use C.SECCOMP_IOCTL_NOTIF_ADDFD or add equivalent variable to libseccomp-go
func seccompIoctlNotifAddfd() uintptr {
return seccompIOW(3, uintptr(unsafe.Sizeof(seccompNotifAddFd{})))
}
type seccompNotifAddFd struct {
id uint64
flags uint32
srcfd uint32
newfd uint32
newfdFlags uint32
}
func (addfd *seccompNotifAddFd) ioctlNotifAddFd(notifFd libseccomp.ScmpFd) error {
ioctl_op := seccompIoctlNotifAddfd()
_, _, errno := syscall.Syscall(syscall.SYS_IOCTL, uintptr(notifFd), ioctl_op, uintptr(unsafe.Pointer(addfd)))
if errno != 0 {
return fmt.Errorf("ioctl(SECCOMP_IOCTL_NOTIF_ADFD) failed: %s", errno)
}
return nil
}
|
