Nick Kralevich | a67e4de | 2013-01-14 11:28:26 -0800 | [diff] [blame] | 1 | /**************************************************************************** |
| 2 | **************************************************************************** |
| 3 | *** |
| 4 | *** This header was automatically generated from a Linux kernel header |
| 5 | *** of the same name, to make information necessary for userspace to |
| 6 | *** call into the kernel available to libc. It contains only constants, |
| 7 | *** structures, and macros generated from the original header, and thus, |
| 8 | *** contains no copyrightable information. |
| 9 | *** |
| 10 | *** To edit the content of this header, modify the corresponding |
| 11 | *** source file (e.g. under external/kernel-headers/original/) then |
| 12 | *** run bionic/libc/kernel/tools/update_all.py |
| 13 | *** |
| 14 | *** Any manual change here will be lost the next time this script will |
| 15 | *** be run. You've been warned! |
| 16 | *** |
| 17 | **************************************************************************** |
| 18 | ****************************************************************************/ |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 19 | #ifndef _UAPI_LINUX_SECCOMP_H |
| 20 | #define _UAPI_LINUX_SECCOMP_H |
| 21 | #include <linux/compiler.h> |
| 22 | #include <linux/types.h> |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 23 | #define SECCOMP_MODE_DISABLED 0 |
| 24 | #define SECCOMP_MODE_STRICT 1 |
| 25 | #define SECCOMP_MODE_FILTER 2 |
Christopher Ferris | 82d7504 | 2015-01-26 10:57:07 -0800 | [diff] [blame] | 26 | #define SECCOMP_SET_MODE_STRICT 0 |
Christopher Ferris | 82d7504 | 2015-01-26 10:57:07 -0800 | [diff] [blame] | 27 | #define SECCOMP_SET_MODE_FILTER 1 |
Christopher Ferris | 1308ad3 | 2017-11-14 17:32:13 -0800 | [diff] [blame] | 28 | #define SECCOMP_GET_ACTION_AVAIL 2 |
Christopher Ferris | d842e43 | 2019-03-07 10:21:59 -0800 | [diff] [blame^] | 29 | #define SECCOMP_GET_NOTIF_SIZES 3 |
Christopher Ferris | 76a1d45 | 2018-06-27 14:12:29 -0700 | [diff] [blame] | 30 | #define SECCOMP_FILTER_FLAG_TSYNC (1UL << 0) |
| 31 | #define SECCOMP_FILTER_FLAG_LOG (1UL << 1) |
| 32 | #define SECCOMP_FILTER_FLAG_SPEC_ALLOW (1UL << 2) |
Christopher Ferris | d842e43 | 2019-03-07 10:21:59 -0800 | [diff] [blame^] | 33 | #define SECCOMP_FILTER_FLAG_NEW_LISTENER (1UL << 3) |
Christopher Ferris | 1308ad3 | 2017-11-14 17:32:13 -0800 | [diff] [blame] | 34 | #define SECCOMP_RET_KILL_PROCESS 0x80000000U |
| 35 | #define SECCOMP_RET_KILL_THREAD 0x00000000U |
| 36 | #define SECCOMP_RET_KILL SECCOMP_RET_KILL_THREAD |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 37 | #define SECCOMP_RET_TRAP 0x00030000U |
| 38 | #define SECCOMP_RET_ERRNO 0x00050000U |
Christopher Ferris | d842e43 | 2019-03-07 10:21:59 -0800 | [diff] [blame^] | 39 | #define SECCOMP_RET_USER_NOTIF 0x7fc00000U |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 40 | #define SECCOMP_RET_TRACE 0x7ff00000U |
Christopher Ferris | 1308ad3 | 2017-11-14 17:32:13 -0800 | [diff] [blame] | 41 | #define SECCOMP_RET_LOG 0x7ffc0000U |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 42 | #define SECCOMP_RET_ALLOW 0x7fff0000U |
Christopher Ferris | 1308ad3 | 2017-11-14 17:32:13 -0800 | [diff] [blame] | 43 | #define SECCOMP_RET_ACTION_FULL 0xffff0000U |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 44 | #define SECCOMP_RET_ACTION 0x7fff0000U |
| 45 | #define SECCOMP_RET_DATA 0x0000ffffU |
| 46 | struct seccomp_data { |
Tao Bao | d7db594 | 2015-01-28 10:07:51 -0800 | [diff] [blame] | 47 | int nr; |
| 48 | __u32 arch; |
Tao Bao | d7db594 | 2015-01-28 10:07:51 -0800 | [diff] [blame] | 49 | __u64 instruction_pointer; |
| 50 | __u64 args[6]; |
Ben Cheng | 655a7c0 | 2013-10-16 16:09:24 -0700 | [diff] [blame] | 51 | }; |
Christopher Ferris | d842e43 | 2019-03-07 10:21:59 -0800 | [diff] [blame^] | 52 | struct seccomp_notif_sizes { |
| 53 | __u16 seccomp_notif; |
| 54 | __u16 seccomp_notif_resp; |
| 55 | __u16 seccomp_data; |
| 56 | }; |
| 57 | struct seccomp_notif { |
| 58 | __u64 id; |
| 59 | __u32 pid; |
| 60 | __u32 flags; |
| 61 | struct seccomp_data data; |
| 62 | }; |
| 63 | struct seccomp_notif_resp { |
| 64 | __u64 id; |
| 65 | __s64 val; |
| 66 | __s32 error; |
| 67 | __u32 flags; |
| 68 | }; |
| 69 | #define SECCOMP_IOC_MAGIC '!' |
| 70 | #define SECCOMP_IO(nr) _IO(SECCOMP_IOC_MAGIC, nr) |
| 71 | #define SECCOMP_IOR(nr,type) _IOR(SECCOMP_IOC_MAGIC, nr, type) |
| 72 | #define SECCOMP_IOW(nr,type) _IOW(SECCOMP_IOC_MAGIC, nr, type) |
| 73 | #define SECCOMP_IOWR(nr,type) _IOWR(SECCOMP_IOC_MAGIC, nr, type) |
| 74 | #define SECCOMP_IOCTL_NOTIF_RECV SECCOMP_IOWR(0, struct seccomp_notif) |
| 75 | #define SECCOMP_IOCTL_NOTIF_SEND SECCOMP_IOWR(1, struct seccomp_notif_resp) |
| 76 | #define SECCOMP_IOCTL_NOTIF_ID_VALID SECCOMP_IOR(2, __u64) |
Nick Kralevich | a67e4de | 2013-01-14 11:28:26 -0800 | [diff] [blame] | 77 | #endif |