commit 98a9295c7ca29e698130d8d56d5f9f6761ca9e42
parent e3b728feb17fa04524caeff44ba8624ab8520332
Author: Joris Vink <joris@coders.se>
Date: Tue, 23 Mar 2021 15:00:33 +0100
no need for semicolumn here.
Diffstat:
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/api/seccomp.md b/api/seccomp.md
@@ -18,7 +18,7 @@ macro. In the example below we allow ioctl(2) and shmat(2) are allowed.
KORE_SECCOMP_FILTER("app",
KORE_SYSCALL_ALLOW(ioctl),
KORE_SYSCALL_ALLOW(shmat)
-);
+)
```
In another example, we allow write() to stdout but no other file descriptor.
@@ -29,7 +29,7 @@ In another example, we allow write() to stdout but no other file descriptor.
KORE_SECCOMP_FILTER("app",
KORE_SYSCALL_ALLOW_ARG(write, 0, STDOUT_FILENO),
KORE_SYSCALL_DENY(write, EPERM)
-);
+)
```
Kore provides a few handy macros that can be used in a KORE_SECCOMP_FILTER: