The nim-seccomp from federicoceratto

nim-seccomp's Introduction

nim-seccomp

Nim adapter for the Seccomp sandbox facility

Features

Provides a high-level adaptor in seccomp.nim
Low-level wrapper in seccomp_lowlevel.nim
Tested on Linux
Basic tests

Installation

sudo apt-get install libseccomp2
nimble install seccomp

Usage

Refer to the generated documentation for the seccomp and seccomp_lowlevel modules

import seccomp

setSeccomp("write exit_group")

echo """Seccomp is now enabled. Future attempts to change the Seccomp configuration
or to call forbidden system calls will cause the process to be terminated"""

# e.g. createDir("/tmp/foo")

or:

import seccomp

let ctx = seccomp_ctx()
ctx.add_rule(Allow, "write")
ctx.add_rule(Allow, "exit_group")
ctx.load()

tests/trigger_seccomp.nim contains running examples of syscalls that will be blocked

Contributing

Testing and PRs are welcome.

Running tests:

nimble test
nimble test_trigger_seccomp

nim-seccomp's People

Contributors

Stargazers

Watchers

nim-seccomp's Issues

Compile error

Hello, I tried to use this package. But I can not compile it.

Source code

test.nim

import seccomp

setSeccomp("write exit_group")

echo """Seccomp is now enabled. Future attempts to change the Seccomp configuration
or to call forbidden system calls will cause the process to be terminated"""

Install and build

nimble install seccomp
nim c test.nim

Result

Hint: used config file '/home/fox/.choosenim/toolchains/nim-1.4.8/config/nim.cfg' [Conf]
Hint: used config file '/home/fox/.choosenim/toolchains/nim-1.4.8/config/config.nims' [Conf]
............
/home/fox/.nimble/pkgs/seccomp-0.2.0/seccomp.nim(9, 8) Error: cannot open file: seccomp_lowlevel