{"action":"closed","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/976","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/976/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/976/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/976/events","html_url":"https://github.com/netblue30/firejail/issues/976","id":195484814,"number":976,"title":"Feature request: Integrate with kafel seccomp-bpf configuration language","user":{"login":"robertswiecki","id":12155236,"avatar_url":"https://avatars3.githubusercontent.com/u/12155236?v=3","gravatar_id":"","url":"https://api.github.com/users/robertswiecki","html_url":"https://github.com/robertswiecki","followers_url":"https://api.github.com/users/robertswiecki/followers","following_url":"https://api.github.com/users/robertswiecki/following{/other_user}","gists_url":"https://api.github.com/users/robertswiecki/gists{/gist_id}","starred_url":"https://api.github.com/users/robertswiecki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robertswiecki/subscriptions","organizations_url":"https://api.github.com/users/robertswiecki/orgs","repos_url":"https://api.github.com/users/robertswiecki/repos","events_url":"https://api.github.com/users/robertswiecki/events{/privacy}","received_events_url":"https://api.github.com/users/robertswiecki/received_events","type":"User","site_admin":false},"labels":[{"id":246547501,"url":"https://api.github.com/repos/netblue30/firejail/labels/information","name":"information","color":"f7c6c7","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-12-14T09:48:21Z","updated_at":"2017-03-27T22:31:01Z","closed_at":"2017-03-27T22:31:01Z","body":"The current seccomp-bpf configuration language is quite rudimentary. It, for example, doesn't seem to allow to allowing/blocking syscalls based on arguments provided to syscalls, or to invoke signal or return no error (ERRNO(0)) but also not execute the syscall.\r\n\r\nThe https://github.com/google/kafel project provides most of that, and it compile both strings and files into working seccomp-bpf policies.\r\n\r\nPolicy examples: https://github.com/google/kafel/tree/master/samples"}}
{"actor":{"display_login":"netblue30"}}