blob: d15e8a9beb58e810f2f4f92e2af38aa5822a1180 [file] [log] [blame]
/* syscall_filter.h
* Copyright (c) 2012 The Chromium OS Authors. All rights reserved.
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
* Syscall filter functions.
#include "bpf.h"
#ifdef __cplusplus
extern "C" {
struct filter_block {
struct sock_filter *instrs;
size_t len;
struct filter_block *next;
struct filter_block *last;
size_t total_len;
struct bpf_labels;
struct filter_block *compile_policy_line(int nr, const char *policy_line,
unsigned int label_id,
struct bpf_labels *labels,
int do_ret_trap);
int compile_file(FILE *policy_file, struct filter_block *head,
struct filter_block **arg_blocks, struct bpf_labels *labels,
int use_ret_trap, int allow_logging,
unsigned int include_level);
int compile_filter(FILE *policy_file, struct sock_fprog *prog, int do_ret_trap,
int add_logging_syscalls);
struct filter_block *new_filter_block(void);
int flatten_block_list(struct filter_block *head, struct sock_filter *filter,
size_t index, size_t cap);
void free_block_list(struct filter_block *head);
int seccomp_can_softfail(void);
#ifdef __cplusplus
}; /* extern "C" */
#endif /* SYSCALL_FILTER_H */