opencontainers / opencontainers/runc
seccomp bpf filter program interface support
Open
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13.5k
- Forks
- 2.3k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 30
Description
I'm a developer interested in adding support for the seccomp bpf filter program interface to runc. This will add to the ability (currently underway) to filter syscalls with arguments.
Can someone please let me know the procedure to follow?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files, tests, or entry points. Start by reviewing runc's existing syscall filtering and the related work on filtering syscall arguments, then determine the scope of the seccomp BPF filter program interface support. Done should mean the requested interface is supported and its behavior is verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100