Expand description

Raw FFI bindings for libseccomp library

Structs

Enums

Comparison operators

Filter attributes

Constants

Allow the syscall to be executed

Kill the thread, defined for backward compatibility

Kill the process

Kill the thread

Allow the syscall to be executed after the action has been logged

Notifies userspace

Throw a SIGSYS signal

The native architecture token

The x32 (32-bit x86_64) architecture token

The x86 (32-bit) architecture token

The x86-64 (64-bit) architecture token

Tell the kernel to execute the target’s system call

Negative pseudo syscall number returned by some functions in case of an error

Functions

Return the specified error code

Notify a tracing process with the specified value

Query the library’s level of API support

Set the library’s level of API support

Adds an architecture to the filter

Check to see if an existing architecture is present in the filter

Return the native architecture token

Removes an architecture from the filter

Resolve the architecture name to a architecture token

Set the value of a filter attribute

Set the value of a filter attribute

Generate seccomp Berkley Packet Filter (BPF) code and export it to a file

Generate seccomp Pseudo Filter Code (PFC) and export it to a file

Initialize the filter state

Loads the filter into the kernel

Merge two filters

Allocate a pair of notification request/response structures

Return the notification fd from a filter that has already been loaded

Free a pair of notification request/response structures.

Check if a notification id is still valid

Send a notification response to a seccomp notification fd

Check if a notification id is still valid

Destroys the filter state and releases any resources

Reset the filter state

Add a new rule to the filter

Add a new rule to the filter

Add a new rule to the filter

Add a new rule to the filter

Set the priority of a given syscall

Resolve a syscall name to a number

Resolve a syscall name to a number

Resolve a syscall name to a number and perform any rewriting necessary

Resolve a syscall number to a name

Query the library version information

Type Definitions

Filter context/handle (*const)

Argument datum

Filter context/handle (*mut)