1 files changed, 0 insertions, 142 deletions
diff --git a/vendor/github.com/projectatomic/buildah/chroot/seccomp.go b/vendor/github.com/projectatomic/buildah/chroot/seccomp.go
deleted file mode 100644
index f2c55017f..000000000
--- a/vendor/github.com/projectatomic/buildah/chroot/seccomp.go
+++ /dev/null
@@ -1,142 +0,0 @@
-// +build linux,seccomp
-
-package chroot
-
-import (
-	"github.com/opencontainers/runtime-spec/specs-go"
-	"github.com/pkg/errors"
-	libseccomp "github.com/seccomp/libseccomp-golang"
-	"github.com/sirupsen/logrus"
-)
-
-// setSeccomp sets the seccomp filter for ourselves and any processes that we'll start.
-func setSeccomp(spec *specs.Spec) error {
-	logrus.Debugf("setting seccomp configuration")
-	if spec.Linux.Seccomp == nil {
-		return nil
-	}
-	mapAction := func(specAction specs.LinuxSeccompAction) libseccomp.ScmpAction {
-		switch specAction {
-		case specs.ActKill:
-			return libseccomp.ActKill
-		case specs.ActTrap:
-			return libseccomp.ActTrap
-		case specs.ActErrno:
-			return libseccomp.ActErrno
-		case specs.ActTrace:
-			return libseccomp.ActTrace
-		case specs.ActAllow:
-			return libseccomp.ActAllow
-		}
-		return libseccomp.ActInvalid
-	}
-	mapArch := func(specArch specs.Arch) libseccomp.ScmpArch {
-		switch specArch {
-		case specs.ArchX86:
-			return libseccomp.ArchX86
-		case specs.ArchX86_64:
-			return libseccomp.ArchAMD64
-		case specs.ArchX32:
-			return libseccomp.ArchX32
-		case specs.ArchARM:
-			return libseccomp.ArchARM
-		case specs.ArchAARCH64:
-			return libseccomp.ArchARM64
-		case specs.ArchMIPS:
-			return libseccomp.ArchMIPS
-		case specs.ArchMIPS64:
-			return libseccomp.ArchMIPS64
-		case specs.ArchMIPS64N32:
-			return libseccomp.ArchMIPS64N32
-		case specs.ArchMIPSEL:
-			return libseccomp.ArchMIPSEL
-		case specs.ArchMIPSEL64:
-			return libseccomp.ArchMIPSEL64
-		case specs.ArchMIPSEL64N32:
-			return libseccomp.ArchMIPSEL64N32
-		case specs.ArchPPC:
-			return libseccomp.ArchPPC
-		case specs.ArchPPC64:
-			return libseccomp.ArchPPC64
-		case specs.ArchPPC64LE:
-			return libseccomp.ArchPPC64LE
-		case specs.ArchS390:
-			return libseccomp.ArchS390
-		case specs.ArchS390X:
-			return libseccomp.ArchS390X
-		case specs.ArchPARISC:
-			/* fallthrough */ /* for now */
-		case specs.ArchPARISC64:
-			/* fallthrough */ /* for now */
-		}
-		return libseccomp.ArchInvalid
-	}
-	mapOp := func(op specs.LinuxSeccompOperator) libseccomp.ScmpCompareOp {
-		switch op {
-		case specs.OpNotEqual:
-			return libseccomp.CompareNotEqual
-		case specs.OpLessThan:
-			return libseccomp.CompareLess
-		case specs.OpLessEqual:
-			return libseccomp.CompareLessOrEqual
-		case specs.OpEqualTo:
-			return libseccomp.CompareEqual
-		case specs.OpGreaterEqual:
-			return libseccomp.CompareGreaterEqual
-		case specs.OpGreaterThan:
-			return libseccomp.CompareGreater
-		case specs.OpMaskedEqual:
-			return libseccomp.CompareMaskedEqual
-		}
-		return libseccomp.CompareInvalid
-	}
-
-	filter, err := libseccomp.NewFilter(mapAction(spec.Linux.Seccomp.DefaultAction))
-	if err != nil {
-		return errors.Wrapf(err, "error creating seccomp filter with default action %q", spec.Linux.Seccomp.DefaultAction)
-	}
-	for _, arch := range spec.Linux.Seccomp.Architectures {
-		if err = filter.AddArch(mapArch(arch)); err != nil {
-			return errors.Wrapf(err, "error adding architecture %q(%q) to seccomp filter", arch, mapArch(arch))
-		}
-	}
-	for _, rule := range spec.Linux.Seccomp.Syscalls {
-		scnames := make(map[libseccomp.ScmpSyscall]string)
-		for _, name := range rule.Names {
-			scnum, err := libseccomp.GetSyscallFromName(name)
-			if err != nil {
-				logrus.Debugf("error mapping syscall %q to a syscall, ignoring %q rule for %q", name, rule.Action, name)
-				continue
-			}
-			scnames[scnum] = name
-		}
-		for scnum := range scnames {
-			if len(rule.Args) == 0 {
-				if err = filter.AddRule(scnum, mapAction(rule.Action)); err != nil {
-					return errors.Wrapf(err, "error adding a rule (%q:%q) to seccomp filter", scnames[scnum], rule.Action)
-				}
-				continue
-			}
-			var conditions []libseccomp.ScmpCondition
-			for _, arg := range rule.Args {
-				condition, err := libseccomp.MakeCondition(arg.Index, mapOp(arg.Op), arg.Value, arg.ValueTwo)
-				if err != nil {
-					return errors.Wrapf(err, "error building a seccomp condition %d:%v:%d:%d", arg.Index, arg.Op, arg.Value, arg.ValueTwo)
-				}
-				conditions = append(conditions, condition)
-			}
-			if err = filter.AddRuleConditional(scnum, mapAction(rule.Action), conditions); err != nil {
-				return errors.Wrapf(err, "error adding a conditional rule (%q:%q) to seccomp filter", scnames[scnum], rule.Action)
-			}
-		}
-	}
-	if err = filter.SetNoNewPrivsBit(spec.Process.NoNewPrivileges); err != nil {
-		return errors.Wrapf(err, "error setting no-new-privileges bit to %v", spec.Process.NoNewPrivileges)
-	}
-	err = filter.Load()
-	filter.Release()
-	if err != nil {
-		return errors.Wrapf(err, "error activating seccomp filter")
-	}
-	return nil
-}