tree 59c036ef747d653fdc0c667152c9da14bbfe15cb
parent 466f231f2ac0425317d4f69b60923a25174e1dd3
author Luis Hector Chavez <lhchavez@google.com> 1539747792 -0700
committer Luis Hector Chavez <lhchavez@google.com> 1541250898 -0700

minijail: Add support for pre-compiled BPF programs

This change introduces minijail_set_seccomp_filters() and
the --seccomp-bpf-binary CLI flag. This allows loading pre-compiled
seccomp-bpf binaries, so that we can use libseccomp or any other
optimizer without adding a lot of bloat to minijail.

Bug: chromium:856315
Test: ./parse_seccomp_policy --dump=stdin_stdout.bpf \
          test/stdin_stdout.policy && \
      ./minijail0 --seccomp-bpf-binary=stdin_stdout.bpf \
          --preload-library=./libminijailpreload.so -- /bin/ls

Change-Id: I87ff9279da40cf9b6576a5db9c8103b2a8fa4dd7