DonsonandHanzo Dev 80aad0dee6 docs(seccomp): correct syscall compatibility status ...

Mark seccomp as partially supported on amd64 and arm64 and document the accepted operation and flags.

Fixes #14627

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-08 11:01:05 +08:00

..

BUILD

Implement openat2(2) in gVisor

2026-08-21 10:34:56 -07:00

error.go

gVisor metric library: Change interface for passing in field values.

2023-04-25 11:49:02 -07:00

linux64_amd64_test.go

Add Points to some syscalls

2022-05-02 13:03:04 -07:00

linux64_arm64_test.go

Add Points to some syscalls

2022-05-02 13:03:04 -07:00

linux64_test.go

seccheck: Initialize seccheck.Points only when needed.

2023-03-07 12:53:27 -08:00

linux64.go

docs(seccomp): correct syscall compatibility status

2026-09-08 11:01:05 +08:00

path.go

Merge pull request #14103 from relkochta:relkochta/openat2

2026-09-01 15:37:45 -07:00

points.go

seccheck: support ptrace request extraction via syscall points

2026-07-23 20:43:59 -07:00

sigset.go

Cleanup remaining comments for #1624.

2022-12-01 14:01:37 -08:00

sys_afs_syscall.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_aio.go

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

sys_capability.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_clone_amd64.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_clone_arm64.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_ebpf.go

bpf(2): return EPERM for unsupported BPF commands without CAP_SYS_ADMIN.

2026-08-03 11:39:54 -07:00

sys_epoll.go

Move //pkg/sentry/kernel/time to //pkg/sentry/ktime.

2024-11-06 18:13:51 -08:00

sys_eventfd.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_file.go

Merge pull request #14103 from relkochta:relkochta/openat2

2026-09-01 15:37:45 -07:00

sys_futex.go

Move //pkg/sentry/kernel/time to //pkg/sentry/ktime.

2024-11-06 18:13:51 -08:00

sys_getdents.go

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

sys_identity.go

proc: implement /proc/[pid]/setgroups

2026-05-19 13:20:35 -04:00

sys_inotify.go

Implement openat2(2) in gVisor

2026-08-21 10:34:56 -07:00

sys_iouring.go

sentry: Move IOUringEnabled to kernel.Kernel Member

2026-05-07 16:40:51 -07:00

sys_key.go

Implement a subset of keyctl(2) and keyrings(7) for better Docker support.

2023-09-20 12:38:39 -07:00

sys_membarrier.go

kvm: RSEQ: Add RSEQ support

2025-12-15 11:14:18 -08:00

sys_mempolicy.go

Untag pointer for getmempolicy

2026-05-28 14:45:04 -07:00

sys_mmap.go

mm: implement MAP_FIXED_NOREPLACE

2026-08-10 20:44:34 +00:00

sys_mount_fd.go

Implement openat2(2) in gVisor

2026-08-21 10:34:56 -07:00

sys_mount.go

Implement openat2(2) in gVisor

2026-08-21 10:34:56 -07:00

sys_mq.go

Enable leak checkers for runsc tests

2024-01-10 11:30:58 -08:00

sys_msgqueue.go

msgqueue: various fixes

2026-01-07 10:40:09 -08:00

sys_personality.go

Implement personality(2) for no-op personality bits.

2026-06-08 16:13:59 -07:00

sys_pipe.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_poll.go

Merge pull request #12851 from tanyifeng:poll-revents-writeback

2026-04-09 12:22:35 -07:00

sys_prctl.go

Implement PR_SET_SECUREBITS(SECBIT_KEEP_CAPS).

2026-06-16 14:09:01 -07:00

sys_process_vm.go

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

sys_random.go

getrandom: allow GRND_INSECURE flag

2026-05-26 22:04:52 -07:00

sys_read_write.go

Remove "AddressSpace activation".

2026-02-12 14:55:06 -08:00

sys_rlimit.go

Add support for setting RLIMIT_RTPRIO.

2026-06-25 16:38:41 -07:00

sys_rseq.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_rusage.go

Update getrusage(2) field support status to reflect implementation.

2026-02-02 18:23:25 -08:00

sys_sched.go

stub implementations for schedattr and ioprio syscalls

2026-06-25 17:07:37 -07:00

sys_seccomp.go

Cleanup creds-related funcs and change CapError behavior

2026-01-08 17:23:58 -08:00

sys_sem.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_shm.go

Fix a few typos

2023-10-25 12:13:42 -07:00

sys_signal.go

Implement pidfds

2026-04-30 13:22:58 -07:00

sys_socket.go

getsockopt(2): only copy out data up to optLen bytes

2026-06-17 16:40:21 -07:00

sys_splice.go

Implement the copy_file_range(2) syscall.

2026-08-30 08:41:32 -07:00

sys_stat_amd64.go

Delete VFS1 syscall handlers.

2022-11-14 13:11:22 -08:00

sys_stat_arm64.go

Delete VFS1 syscall handlers.

2022-11-14 13:11:22 -08:00

sys_stat.go

Implement openat2(2) in gVisor

2026-08-21 10:34:56 -07:00

sys_sync.go

Implement O_DSYNC and fdatasync(2)

2026-08-03 15:38:06 -07:00

sys_sysinfo.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_syslog.go

Fix a few typos

2023-10-25 12:13:42 -07:00

sys_thread.go

Make every user of a tty also refcount

2026-08-10 18:19:56 -07:00

sys_time.go

nvproxy: expose CLOCK_MONOTONIC_RAW as a distinct clock for capProfiling

2026-08-14 19:42:03 +00:00

sys_timer.go

nvproxy: expose CLOCK_MONOTONIC_RAW as a distinct clock for capProfiling

2026-08-14 19:42:03 +00:00

sys_timerfd.go

Allow TFD_TIMER_CANCEL_ON_SET in timerfd_settime() with no effect

2026-05-15 09:30:40 -07:00

sys_tls_amd64.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_tls_arm64.go

gVisor: Refactor SyscallFn to take in the syscall number as argument.

2023-03-22 12:06:26 -07:00

sys_utsname.go

Add AWS EFA support to rdmaproxy

2026-08-15 01:24:30 +00:00

sys_xattr.go

Implement openat2(2) in gVisor

2026-08-21 10:34:56 -07:00

timespec.go

Delete VFS1 syscall handlers.

2022-11-14 13:11:22 -08:00