Function evaluate 

pub fn evaluate(
    prog: &[Insn],
    arch: u32,
    nr: u32,
    args: [u64; 6],
) -> Result<u32, String>

Runs prog on one syscall the way the kernel does and returns the SECCOMP_RET_* value. Supports only the opcodes program emits.

arch is the AUDIT_ARCH_* value, nr the syscall number, and args its six arguments.

Errors

Returns a message for an opcode or load offset program never emits, and when the program ends without returning.