mirror of
https://github.com/opencontainers/runc.git
synced 2026-04-22 23:17:17 +08:00
Kir Kolyshkin
ac93746c4d
seccomp.IsEnabled is not well defined (the presence of Seccomp: field in /proc/self/status does not tell us whether CONFIG_SECCOMP_FILTER is enabled in the kernel; parsing all keys in /proc/self/status is a moderate waste of resources, etc). I traced its addition back to [1] and even in there it is not clear what for it was added. There were never an internal user (except for the recently added one, removed by the previous commit), and can't find any external users (but found two copy-pastes of this code, suffering from the same problems, see [2] and [3]). Since it is broken and has no users, remove it. [1] https://github.com/opencontainers/runc/pull/471 [2] https://github.com/containerd/containerd/blob/master/pkg/seccomp/seccomp_linux.go [3] https://github.com/containers/common/blob/master/pkg/seccomp/supported.go Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
25 lines
498 B
Go
25 lines
498 B
Go
// +build !linux !cgo !seccomp
|
|
|
|
package seccomp
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"github.com/opencontainers/runc/libcontainer/configs"
|
|
)
|
|
|
|
var ErrSeccompNotEnabled = errors.New("seccomp: config provided but seccomp not supported")
|
|
|
|
// InitSeccomp does nothing because seccomp is not supported.
|
|
func InitSeccomp(config *configs.Seccomp) error {
|
|
if config != nil {
|
|
return ErrSeccompNotEnabled
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Version returns major, minor, and micro.
|
|
func Version() (uint, uint, uint) {
|
|
return 0, 0, 0
|
|
}
|