pub fn install(program: &[SockFilter]) -> Result<i32, i32>Expand description
Installs program in the calling thread and returns the listener fd.
Must run in the child, after PR_SET_NO_NEW_PRIVS and PTRACE_TRACEME,
before execve. Async-signal-safe: no allocation.
§Arguments
program- Filter frombuild.
§Errors
Errno from seccomp(2); EINVAL on a kernel without user notification.