You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: config-linux.md
+2-4Lines changed: 2 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -624,15 +624,13 @@ The following parameters can be specified to set up seccomp:
624
624
*`SECCOMP_FILTER_FLAG_TSYNC`
625
625
*`SECCOMP_FILTER_FLAG_LOG`
626
626
*`SECCOMP_FILTER_FLAG_SPEC_ALLOW`
627
-
*`SECCOMP_FILTER_FLAG_NEW_LISTENER`
628
-
*`SECCOMP_FILTER_FLAG_TSYNC_ESRCH`
629
627
630
-
***`listenerPath`***(string, OPTIONAL)* - specifies the path of UNIX domain socket over which the runtime will send the [container process state](#containerprocessstate) data structure when the `SECCOMP_FILTER_FLAG_NEW_LISTENER` flag is specified.
628
+
***`listenerPath`***(string, OPTIONAL)* - specifies the path of UNIX domain socket over which the runtime will send the [container process state](#containerprocessstate) data structure when the `SCMP_ACT_NOTIFY` action is used.
631
629
This socket MUST use `AF_UNIX` domain and `SOCK_STREAM` type.
632
630
The runtime MUST send exactly one [container process state](#containerprocessstate) per connection.
633
631
The connection MUST NOT be reused and it MUST be closed after sending a seccomp state.
634
632
If sending to this socket fails, the runtime MUST [generate an error](runtime.md#errors).
635
-
This field MUST be set if and only if the flag `SECCOMP_FILTER_FLAG_NEW_LISTENER`is used.
633
+
If the `SCMP_ACT_NOTIFY` action is not used this value is ignored.
636
634
637
635
The runtime sends the following file descriptors using `SCM_RIGHTS` and set their corresponding indexes in the `fdIndexes` map of the [container process state](#containerprocessstate):
0 commit comments