pelagos 0.1.1

Fast Linux container runtime — OCI-compatible, namespaces, cgroups v2, seccomp, networking, image management
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

/* Test program to directly call blocked syscalls */
#include <stdio.h>
#include <unistd.h>
#include <sys/syscall.h>
#include <errno.h>
#include <string.h>

int main() {
    printf("Testing direct syscall: reboot()\n");

    /* Directly call reboot syscall (SYS_reboot = 169 on x86_64) */
    long ret = syscall(SYS_reboot, 0, 0, 0, 0);

    if (ret == -1) {
        printf("reboot() failed: %s (errno=%d)\n", strerror(errno), errno);
        if (errno == EPERM) {
            printf("SUCCESS: Seccomp blocked reboot syscall with EPERM\n");
            return 0;
        }
    } else {
        printf("FAIL: reboot() succeeded (returned %ld)\n", ret);
        return 1;
    }

    return 0;
}