libseccomp
libseccomp copied to clipboard
RFE: add the ability to fail permissive/restrictive when mangling rules
See the following systemd issue:
- https://github.com/systemd/systemd/issues/4575
The idea with this RFE would be to create a new filter attribute that would allow callers to select if they want the automatic rule mangling to be more restrictive/permissive when mangling rules.
Looking back at this now, I'm not 100% convinced this is a good idea, and the age of this issue tends to imply that it isn't a "must have" for other projects. I'm going to drop this from v2.6.0 now, but I'll leave it open for the time being.
Thoughts @drakenclimber?