diff --git a/config-linux.md b/config-linux.md index 3d2dfd881..a56103937 100644 --- a/config-linux.md +++ b/config-linux.md @@ -604,13 +604,14 @@ The following parameters can be specified to set up seccomp: * **`names`** *(array of strings, REQUIRED)* - the names of the syscalls. `names` MUST contain at least one entry. * **`action`** *(string, REQUIRED)* - the action for seccomp rules. - A valid list of constants as of libseccomp v2.3.2 is shown below. + A valid list of constants as of libseccomp v2.4.0 is shown below. * `SCMP_ACT_KILL` * `SCMP_ACT_TRAP` * `SCMP_ACT_ERRNO` * `SCMP_ACT_TRACE` * `SCMP_ACT_ALLOW` + * `SCMP_ACT_LOG` * **`args`** *(array of objects, OPTIONAL)* - the specific syscall in seccomp. diff --git a/schema/defs-linux.json b/schema/defs-linux.json index c78c9e42e..13e00f3a3 100644 --- a/schema/defs-linux.json +++ b/schema/defs-linux.json @@ -39,7 +39,8 @@ "SCMP_ACT_TRAP", "SCMP_ACT_ERRNO", "SCMP_ACT_TRACE", - "SCMP_ACT_ALLOW" + "SCMP_ACT_ALLOW", + "SCMP_ACT_LOG" ] }, "SeccompFlag": { diff --git a/specs-go/config.go b/specs-go/config.go index d8a3689ad..7e50822cc 100644 --- a/specs-go/config.go +++ b/specs-go/config.go @@ -599,6 +599,7 @@ const ( ActErrno LinuxSeccompAction = "SCMP_ACT_ERRNO" ActTrace LinuxSeccompAction = "SCMP_ACT_TRACE" ActAllow LinuxSeccompAction = "SCMP_ACT_ALLOW" + ActLog LinuxSeccompAction = "SCMP_ACT_LOG" ) // LinuxSeccompOperator used to match syscall arguments in Seccomp