Improve default seccomp and add plugin FF

Paul Bryantrequested to merge
ff-seccomp-plugin-support into develop
  • Introduce feature for plugin support that will received additional development over the next release. The generated filter (libseccomp.ScmpFilter) is passed to the plugin for further refinement. This will allow further control than previously allowed with only the configuration files allow/block lists.
  • Additional unit and integration testing.
  • Overhaul how rules/conditionals are identified to ease review and future development improvements.

Please note that the plugin support is subject to change based upon feedback and should only be used for testing purposes.

Closes #116 (closed)

Edited by Paul Bryant

Merge request reports