A tool to analyze seccomp filters like seccomp-tools, written in C

English Version | 中文文档

• Arch Linux users:

  Install via AUR, build ceccomp package ⇒

  Or install via archlinuxcn repo if you have it set in you pacman.conf.

• Stable installation:

  Clone the whole repo, then run ./configure. Add --without-doc flag if you don't have asciidoctor, and add --without-i18n flag if you don't have gettext package.

git clone https://github.com/dbgbgtf1/Ceccomp.git
cd Ceccomp
./configure
./configure # run this again if Makefile is not generated
make
make install # install at /usr/bin

• Testing installation:

  Clone the whole repo, and then run ./configure --devmode.

git clone https://github.com/dbgbgtf1/Ceccomp.git
cd Ceccomp
./configure --devmode
make

Run configure and make, then invoke scripts/check.sh from repo root. We expect the script could pass all checks. If you find some checks failed, please submit an issue to report your case.

check.sh stops if any error occurs by default, you can override this behavior by adding a --tolerant flag, which allows check.sh to run through the whole test.

To run the test, you need 3 extra packages: pkgconf (required by pkg-config), diffutils (required by diff) and procps (required by pgrep and pkill).

Any Issue or Pr are welcome!

• seccomp-tools: The tool in Ruby inspires us to write ceccomp
• Bootswatch: Provides awesome css for html doc under MIT

Copyright (C) 2025-present, ceccomp contributors, distributed under GNU General Public License v3.0 or Later