blob: a1e577dae0c0a284e6bf4e38f04a0fa2e3fbe3ad [file] [log] [blame]
Nick Kralevicha67e4de2013-01-14 11:28:26 -08001/****************************************************************************
2 ****************************************************************************
3 ***
4 *** This header was automatically generated from a Linux kernel header
5 *** of the same name, to make information necessary for userspace to
6 *** call into the kernel available to libc. It contains only constants,
7 *** structures, and macros generated from the original header, and thus,
8 *** contains no copyrightable information.
9 ***
10 *** To edit the content of this header, modify the corresponding
11 *** source file (e.g. under external/kernel-headers/original/) then
12 *** run bionic/libc/kernel/tools/update_all.py
13 ***
14 *** Any manual change here will be lost the next time this script will
15 *** be run. You've been warned!
16 ***
17 ****************************************************************************
18 ****************************************************************************/
Ben Cheng655a7c02013-10-16 16:09:24 -070019#ifndef _UAPI_LINUX_SECCOMP_H
20#define _UAPI_LINUX_SECCOMP_H
21#include <linux/compiler.h>
22#include <linux/types.h>
Ben Cheng655a7c02013-10-16 16:09:24 -070023#define SECCOMP_MODE_DISABLED 0
24#define SECCOMP_MODE_STRICT 1
25#define SECCOMP_MODE_FILTER 2
Christopher Ferris82d75042015-01-26 10:57:07 -080026#define SECCOMP_SET_MODE_STRICT 0
Christopher Ferris82d75042015-01-26 10:57:07 -080027#define SECCOMP_SET_MODE_FILTER 1
Christopher Ferris1308ad32017-11-14 17:32:13 -080028#define SECCOMP_GET_ACTION_AVAIL 2
Christopher Ferrisd842e432019-03-07 10:21:59 -080029#define SECCOMP_GET_NOTIF_SIZES 3
Christopher Ferris76a1d452018-06-27 14:12:29 -070030#define SECCOMP_FILTER_FLAG_TSYNC (1UL << 0)
31#define SECCOMP_FILTER_FLAG_LOG (1UL << 1)
32#define SECCOMP_FILTER_FLAG_SPEC_ALLOW (1UL << 2)
Christopher Ferrisd842e432019-03-07 10:21:59 -080033#define SECCOMP_FILTER_FLAG_NEW_LISTENER (1UL << 3)
Christopher Ferris1308ad32017-11-14 17:32:13 -080034#define SECCOMP_RET_KILL_PROCESS 0x80000000U
35#define SECCOMP_RET_KILL_THREAD 0x00000000U
36#define SECCOMP_RET_KILL SECCOMP_RET_KILL_THREAD
Ben Cheng655a7c02013-10-16 16:09:24 -070037#define SECCOMP_RET_TRAP 0x00030000U
38#define SECCOMP_RET_ERRNO 0x00050000U
Christopher Ferrisd842e432019-03-07 10:21:59 -080039#define SECCOMP_RET_USER_NOTIF 0x7fc00000U
Ben Cheng655a7c02013-10-16 16:09:24 -070040#define SECCOMP_RET_TRACE 0x7ff00000U
Christopher Ferris1308ad32017-11-14 17:32:13 -080041#define SECCOMP_RET_LOG 0x7ffc0000U
Ben Cheng655a7c02013-10-16 16:09:24 -070042#define SECCOMP_RET_ALLOW 0x7fff0000U
Christopher Ferris1308ad32017-11-14 17:32:13 -080043#define SECCOMP_RET_ACTION_FULL 0xffff0000U
Ben Cheng655a7c02013-10-16 16:09:24 -070044#define SECCOMP_RET_ACTION 0x7fff0000U
45#define SECCOMP_RET_DATA 0x0000ffffU
46struct seccomp_data {
Tao Baod7db5942015-01-28 10:07:51 -080047 int nr;
48 __u32 arch;
Tao Baod7db5942015-01-28 10:07:51 -080049 __u64 instruction_pointer;
50 __u64 args[6];
Ben Cheng655a7c02013-10-16 16:09:24 -070051};
Christopher Ferrisd842e432019-03-07 10:21:59 -080052struct seccomp_notif_sizes {
53 __u16 seccomp_notif;
54 __u16 seccomp_notif_resp;
55 __u16 seccomp_data;
56};
57struct seccomp_notif {
58 __u64 id;
59 __u32 pid;
60 __u32 flags;
61 struct seccomp_data data;
62};
63struct seccomp_notif_resp {
64 __u64 id;
65 __s64 val;
66 __s32 error;
67 __u32 flags;
68};
69#define SECCOMP_IOC_MAGIC '!'
70#define SECCOMP_IO(nr) _IO(SECCOMP_IOC_MAGIC, nr)
71#define SECCOMP_IOR(nr,type) _IOR(SECCOMP_IOC_MAGIC, nr, type)
72#define SECCOMP_IOW(nr,type) _IOW(SECCOMP_IOC_MAGIC, nr, type)
73#define SECCOMP_IOWR(nr,type) _IOWR(SECCOMP_IOC_MAGIC, nr, type)
74#define SECCOMP_IOCTL_NOTIF_RECV SECCOMP_IOWR(0, struct seccomp_notif)
75#define SECCOMP_IOCTL_NOTIF_SEND SECCOMP_IOWR(1, struct seccomp_notif_resp)
76#define SECCOMP_IOCTL_NOTIF_ID_VALID SECCOMP_IOR(2, __u64)
Nick Kralevicha67e4de2013-01-14 11:28:26 -080077#endif