#ifndef WOJ_SANDBOX_RULES_H #define WOJ_SANDBOX_RULES_H #include "../sandbox.h" #include "../utils/list.h" #include "seccomp.h" #define ADD_RULE_LIST(white_list, act) \ do { \ int white_len = sizeof(white_list) / sizeof(white_list[0]); \ for (int i = 0; i < white_len; i++) add_syscall_nr(white_list[i], ctx, act); \ } while (0) struct rule { char *name; void (*setup)(scmp_filter_ctx); struct list_head list; }; void register_rule(struct rule *rule); void setup_rule(const char *name, scmp_filter_ctx ctx, const char *exe_path); void dump_rules(void); #endif // WOJ_SANDBOX_RULES_H