I am making an online code judge using Replit, and I want to use seccomp to securely run submitted code. Through reading a few tutorials, I have made ...
Recently I decided to buy a NanoPi R5S to use as a router, and, instead of using their default build which is based off OpenWRT called FriendlyWRT, I ...
I am tracing some processes and their children using ptrace. I am trying to print specific system call (using Seccomp filter that notifies ptrace, see ...
Unable to initiate docker container with a custom seccomp profile using JSON. Getting below error. We have tried this on various docker platforms l ...
Puppeteer version: 10.2.0 Platform / OS version: Ubuntu 20.04.3 LTS aarch64 Node.js version: v.14.17.6 Happens on any URL. This is my test ...
Trying to set a custom seccomp profile when using kubectl apply and despite the file being there in the container, the pod will not start with the fol ...
I know the way to bypass filter mode, but I don't know the way to bypass strict mode. At 64bit The code has: read 1024 bytes at rwxp mapped buf ...
I am trying to use a custom seccomp profile with docker run command; however, I invoked with the following error- What would be the possible cause ...
I am working with seccomp BPF and need to set the jump values (jt/jf/k) of a jump statement (conditional jump/jump always) as the value stored in the ...
I have just started learning about seccomp filters and I am using libseccomp v2.4.4. I tried to write a basic whitelisting filter that will only allow ...
What is best way to restrict/sandbox a Python program? How can I restrict a Python program to only be able to access one website and print to stdout? ...
I want to run a process with a seccomp profile applied to it (can be from C, terminal, etc.). In particular, I would like the target command to not be ...
When working with seccomp userspace notifications (https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html) via SECCOMP_RET_USER_NOTI ...
I would like to know if it is possible to install a seccomp filter in a child process in a Go program. Currently I am spawning the child process as fo ...
I have to write a Python3 program which counts every process on a virtual machine that's using seccomp. It should use the proc filesystem to identify ...
I am trying to implement an system call tracer with the support of kernel SECCOMP filters to reduce the overhead by filtering a few syscall types. Al ...
I'm recently writing programs with libcap and libseccomp, and I notice a problem when using them together. In the following minimal reproducible exam ...
Is it possible to write a seccomp-BPF program to filter on the system call instruction pointer? For example, to kill the process where there is a syst ...
When I try to build a docker image I get the following error OCI runtime create failed: container_linux.go:346: starting container process caused ...
I'm having a problem with kube & Cri-o. Actually I'm deploying a kube cluster and I just wan't to deploy the dashboard. I've installed CRIO instea ...