{"push_id":2980207883,"size":4,"distinct_size":4,"ref":"refs/heads/seccomp","head":"5caa644f1ab7c6f1b4b8e3bce321975e84f03e8a","before":"23c9e489e9dbd27da2a571babf4d8d24c5b5d37d","commits":[{"sha":"41c93b2153b345750ef85e0a948640d78fc2d379","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added a parser for the Docker Seccomp config format.\n\nDocker Seccomp config is a JSON file containing Seccomp filtering\nrules. This patch introduces a parser for Docker Seccomp config format.\nThis parser accepts a JSON-string, parses and validates it, then\nreturns a prepared `ContainerSeccompProfile` message.\n\nReview: https://reviews.apache.org/r/68019","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/41c93b2153b345750ef85e0a948640d78fc2d379"},{"sha":"4fe400496d588f97248a64668708eca7c6befe88","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added new `--seccomp_config_dir` flag to the agent.\n\nThis flag is used to specify a path to the directory containing\nSeccomp profiles. This flag is used by the `linux/seccomp` isolator.\n\nReview: https://reviews.apache.org/r/68020","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/4fe400496d588f97248a64668708eca7c6befe88"},{"sha":"7a230bbc2b909e12baaa8923d3c7b7c5f003fb6a","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Added `linux/seccomp` isolator.\n\nThis patch introduces `linux/seccomp` isolator which is used for\npreparing `ContainerSeccompProfile` for the Mesos containerizer\nlauncher. If the `ContainerConfig` message has an info about Seccomp\nprofile name, then this info will be used to locate a Seccomp profile.\nThe given Seccomp profile is parsed and the resulting\n`ContainerSeccompProfile` is stored in the `ContainerLaunchInfo`\nmessage.\n\nReview: https://reviews.apache.org/r/68021","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/7a230bbc2b909e12baaa8923d3c7b7c5f003fb6a"},{"sha":"5caa644f1ab7c6f1b4b8e3bce321975e84f03e8a","author":{"name":"Andrei Budnik","email":"1a3b2b75daf2b7732f32d5377c6813f0bb2254b8@mesosphere.com"},"message":"Enabled Seccomp filter in the containerizer launcher.\n\nContainerizer launcher creates an instance of `SeccompFilter`, which is\nused to setup Seccomp profile using `ContainerSeccompProfile` message\nprepared by the `linux/seccomp` isolator. The Seccomp filter is loaded\nright before calling `execve()`, so that a container will be running\nwith a syscall filtering enabled.\n\nReview: https://reviews.apache.org/r/68022","distinct":true,"url":"https://api.github.com/repos/abudnik/mesos/commits/5caa644f1ab7c6f1b4b8e3bce321975e84f03e8a"}]}
{"actor":{"display_login":"abudnik"}}