Something went wrong. Try again.
(I'm so sorry!) Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Something went wrong. Try again.
C
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117/* SPDX-License-Identifier: GPL-2.0 */#ifndef _LINUX_SECCOMP_H#define _LINUX_SECCOMP_H
#include <uapi/linux/seccomp.h>#include <linux/seccomp_types.h>
#define SECCOMP_FILTER_FLAG_MASK (SECCOMP_FILTER_FLAG_TSYNC | \ SECCOMP_FILTER_FLAG_LOG | \ SECCOMP_FILTER_FLAG_SPEC_ALLOW | \ SECCOMP_FILTER_FLAG_NEW_LISTENER | \ SECCOMP_FILTER_FLAG_TSYNC_ESRCH | \ SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV)
/* sizeof() the first published struct seccomp_notif_addfd */#define SECCOMP_NOTIFY_ADDFD_SIZE_VER0 24#define SECCOMP_NOTIFY_ADDFD_SIZE_LATEST SECCOMP_NOTIFY_ADDFD_SIZE_VER0
#ifdef CONFIG_SECCOMP
#include <linux/thread_info.h>#include <linux/atomic.h>#include <asm/seccomp.h>
extern bool __seccomp_permit_syscall(void);
#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTERstatic __always_inline bool seccomp_permit_syscall(void){ if (unlikely(test_syscall_work(SECCOMP))) return __seccomp_permit_syscall(); return true;}#elseextern void secure_computing_strict(int this_syscall);#endif
extern long prctl_get_seccomp(void);extern long prctl_set_seccomp(unsigned long, void __user *);
static inline int seccomp_mode(struct seccomp *s){ return s->mode;}
#else /* CONFIG_SECCOMP */
#include <linux/errno.h>
struct seccomp_data;
#ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTERstatic inline bool seccomp_permit_syscall(void) { return true; }#elsestatic inline void secure_computing_strict(int this_syscall) { return; }#endifstatic inline bool __seccomp_permit_syscall(void) { return true; }
static inline long prctl_get_seccomp(void){ return -EINVAL;}
static inline long prctl_set_seccomp(unsigned long arg2, char __user *arg3){ return -EINVAL;}
static inline int seccomp_mode(struct seccomp *s){ return SECCOMP_MODE_DISABLED;}#endif /* CONFIG_SECCOMP */
#ifdef CONFIG_SECCOMP_FILTERextern void seccomp_filter_release(struct task_struct *tsk);extern void get_seccomp_filter(struct task_struct *tsk);#else /* CONFIG_SECCOMP_FILTER */static inline void seccomp_filter_release(struct task_struct *tsk){ return;}static inline void get_seccomp_filter(struct task_struct *tsk){ return;}#endif /* CONFIG_SECCOMP_FILTER */
#if defined(CONFIG_SECCOMP_FILTER) && defined(CONFIG_CHECKPOINT_RESTORE)extern long seccomp_get_filter(struct task_struct *task, unsigned long filter_off, void __user *data);extern long seccomp_get_metadata(struct task_struct *task, unsigned long filter_off, void __user *data);#elsestatic inline long seccomp_get_filter(struct task_struct *task, unsigned long n, void __user *data){ return -EINVAL;}static inline long seccomp_get_metadata(struct task_struct *task, unsigned long filter_off, void __user *data){ return -EINVAL;}#endif /* CONFIG_SECCOMP_FILTER && CONFIG_CHECKPOINT_RESTORE */
#ifdef CONFIG_SECCOMP_CACHE_DEBUGstruct seq_file;struct pid_namespace;struct pid;
int proc_pid_seccomp_cache(struct seq_file *m, struct pid_namespace *ns, struct pid *pid, struct task_struct *task);#endif#endif /* _LINUX_SECCOMP_H */