Q: enable seccomp notify for API level 5, linux kernel 5.6 and below about libseccomp-golang HOT 4 CLOSED

@pcmoore @rata I'm sorry for my late reply. Thanks for your comments. I got it.

from libseccomp-golang.

@utam0k when we added support for seccomp notify here, it was requested by @pcmoore to not provide that option. The original patch did support it, but it was considered that it is just too easy to misuse, so we removed it. See the discussion here: #59 (comment)

Just providing some context, I'll let the maintainers answer the question :)

from libseccomp-golang.

Hi @utam0k, @rata provided a good link back to our earlier discussions around this and I still stand by that decision.

There are some challenges here due to how golang manages threads as well as how the Linux Kernel initially implemented libseccomp notifications, and I believe the best we can do is withhold notification support on kernels that don't support libseccomp's API level 6.

If you really wanted to try it, you could always modify a local clone of the golang bindings and install that on your system but please understand that's not something we can support upstream.

from libseccomp-golang.

I'm going to close this issue as I think my last response answers the question, but if you feel otherwise please go ahead and reopen this issue - thanks!

from libseccomp-golang.