Skip to content

feat(control): Add ResolvedSeccompProfile for pre-resolved seccomp filters #49

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ecpullen merged 1 commit into from
Jul 29, 2026
Merged

feat(control): Add ResolvedSeccompProfile for pre-resolved seccomp filters #49

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 37 additions & 0 deletions protect/control/v1/common.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -478,6 +478,43 @@ message WorkloadSecuritySpec {
// root; set only when seccomp_profile_type == SECCOMP_PROFILE_TYPE_LOCALHOST.
string seccomp_localhost_ref = 11;
AppArmorProfileType apparmor_profile_type = 12;
// A fully-resolved seccomp filter, used instead of seccomp_profile_type/
// seccomp_localhost_ref by callers that have already resolved the actual
// syscall rules themselves and have no symbolic type/path left to describe
// it with (e.g. a containerd v2 shim: containerd's own CRI plugin resolves
// RuntimeDefault/Localhost into the OCI spec's `linux.seccomp` before ever
// invoking the shim, so the shim only ever sees the resolved rules, never a
// type or a profile path). When set, this is compiled and enforced
// verbatim, and seccomp_profile_type/seccomp_localhost_ref are ignored.
optional ResolvedSeccompProfile resolved_seccomp_profile = 13;
}

// Mirrors a resolved OCI LinuxSeccomp filter field-for-field, so a caller
// that already has one (see WorkloadSecuritySpec.resolved_seccomp_profile)
// can hand it over directly instead of re-deriving a symbolic type/path.
message ResolvedSeccompProfile {
// e.g. "SCMP_ACT_ERRNO", "SCMP_ACT_ALLOW" (OCI's LinuxSeccompAction, as its
// own wire string).
string default_action = 1;
optional uint32 default_errno_ret = 2;
// e.g. "SCMP_ARCH_X86_64". Empty means "all/native" (OCI's default).
repeated string architectures = 3;
repeated ResolvedSeccompSyscallRule syscalls = 4;
}

message ResolvedSeccompSyscallRule {
repeated string names = 1;
string action = 2;
optional uint32 errno_ret = 3;
repeated ResolvedSeccompSyscallArg args = 4;
}

message ResolvedSeccompSyscallArg {
uint32 index = 1;
uint64 value = 2;
optional uint64 value_two = 3;
// e.g. "SCMP_CMP_EQ" (OCI's LinuxSeccompOperator).
string op = 4;
}

// We do not support custom Localhost AppArmor policies.
Expand Down
Loading