Kir Kolyshkin d105e052d3 libct/seccomp/config: add missing KillThread, KillProcess ...

OCI spec added SCMP_ACT_KILL_THREAD and SCMP_ACT_KILL_PROCESS almost two
years ago ([1], [2]), but runc support was half-finished [3].

Add these actions, and modify the test case to check them.

In addition, "runc features" now lists the new actions.

[1] https://github.com/opencontainers/runtime-spec/pull/1044
[2] https://github.com/opencontainers/runtime-spec/pull/1064
[3] https://github.com/opencontainers/runc/pulls/3204

Fixes: 4a4d4f109b
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
(cherry picked from commit e74fdeb88a)
(cherry picked from commit 68427f33d0)
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>

2022-05-20 13:25:51 -07:00

..

example.go

runc: do not set inheritable capabilities

2022-05-05 12:20:40 -07:00

spec_linux_test.go

libct/seccomp/config: add missing KillThread, KillProcess

2022-05-20 13:25:51 -07:00

spec_linux.go

Support recursive mount attrs ("rro", "rnosuid", "rnodev", ...)

2021-12-07 17:39:57 +09:00