[GH-ISSUE #976] Feature request: Integrate with kafel seccomp-bpf configuration language #666

New issue

Closed

opened 2026-05-05 06:24:04 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 06:24:04 -06:00

Owner

Originally created by @robertswiecki on GitHub (Dec 14, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/976

The current seccomp-bpf configuration language is quite rudimentary. It, for example, doesn't seem to allow to allowing/blocking syscalls based on arguments provided to syscalls, or to invoke signal or return no error (ERRNO(0)) but also not execute the syscall.

The https://github.com/google/kafel project provides most of that, and it compile both strings and files into working seccomp-bpf policies.

Policy examples: https://github.com/google/kafel/tree/master/samples

Originally created by @robertswiecki on GitHub (Dec 14, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/976 The current seccomp-bpf configuration language is quite rudimentary. It, for example, doesn't seem to allow to allowing/blocking syscalls based on arguments provided to syscalls, or to invoke signal or return no error (ERRNO(0)) but also not execute the syscall. The https://github.com/google/kafel project provides most of that, and it compile both strings and files into working seccomp-bpf policies. Policy examples: https://github.com/google/kafel/tree/master/samples

gitea-mirror

2026-05-05 06:24:04 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 06:24:13 -06:00

Author

Owner

@netblue30 commented on GitHub (Dec 14, 2016):

Thanks for the link, I'll look into it.

@netblue30 commented on GitHub (Dec 14, 2016): Thanks for the link, I'll look into it.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#666

No description provided.

Rows
Columns