Function seccomp_droundy_sys::seccomp_rule_add_exact [] [src]

pub unsafe extern "C" fn seccomp_rule_add_exact(
    ctx: *mut scmp_filter_ctx,
    action: uint32_t,
    syscall: c_int,
    arg_cnt: c_uint,
     ...
) -> c_int

Add a new rule to the filter

@param ctx the filter context @param action the filter action @param syscall the syscall number @param arg_cnt the number of argument filters in the argument filter chain @param ... scmp_arg_cmp structs (use of SCMP_ARG_CMP() recommended)

This function adds a series of new argument/value checks to the seccomp filter for the given syscall; multiple argument/value checks can be specified and they will be chained together (AND'd together) in the filter. If the specified rule can not be represented on the architecture the function will fail. Returns zero on success, negative values on failure.