woj-sandbox/rules/rules.h

#ifndef WOJ_SANDBOX_RULES_H
#define WOJ_SANDBOX_RULES_H

#include "../sandbox.h"
#include "../utils/list.h"

#include "seccomp.h"

#define ADD_RULE_LIST(white_list, act)                                               \
    do {                                                                             \
        int white_len = sizeof(white_list) / sizeof(white_list[0]);                  \
        for (int i = 0; i < white_len; i++) add_syscall_nr(white_list[i], ctx, act); \
    } while (0)

struct rule {
    char            *name;
    void             (*setup)(scmp_filter_ctx);
    struct list_head list;
};

void register_rule(struct rule *rule);
void setup_rule(const char *name, scmp_filter_ctx ctx, const char *exe_path);
void dump_rules(void);

#endif // WOJ_SANDBOX_RULES_H