Expand description
Raw kernel ABI not covered (or not covered stably) by the libc crate:
the seccomp user-notification structures and ioctls, plus small helpers.
Layouts are the x86_64 ones from linux/seccomp.h; they were checked
against the C compiler before being written down here.
Structs§
- Seccomp
Data - Mirror of
struct seccomp_data. - Seccomp
Notif - Mirror of
struct seccomp_notif(80 bytes). - Seccomp
Notif Addfd - Mirror of
struct seccomp_notif_addfd(24 bytes). - Seccomp
Notif Resp - Mirror of
struct seccomp_notif_resp(24 bytes).
Constants§
- AUDIT_
ARCH_ AARC H64 - AUDIT_
ARCH_ ARM - AUDIT_
ARCH_ I386 - AUDIT_
ARCH_ X86_ 64 - PATH_
MAX - Maximum path length we read out of a tracee.
- RED_
ZONE_ SIZE - Bytes a 64-bit ABI guarantees below the stack pointer (the red zone).
- SECCOMP_
ADDFD_ FLAG_ SEND - SECCOMP_
ADDFD_ FLAG_ SETFD - SECCOMP_
FILTER_ FLAG_ NEW_ LISTENER - SECCOMP_
IOCTL_ NOTIF_ ADDFD - SECCOMP_
IOCTL_ NOTIF_ ID_ VALID - SECCOMP_
IOCTL_ NOTIF_ RECV - SECCOMP_
IOCTL_ NOTIF_ SEND - SECCOMP_
RET_ ALLOW - SECCOMP_
RET_ ERRNO - SECCOMP_
RET_ TRACE - SECCOMP_
RET_ USER_ NOTIF - SECCOMP_
SET_ MODE_ FILTER - SECCOMP_
USER_ NOTIF_ FLAG_ CONTINUE
Functions§
- check
- Converts a raw syscall return value into a
Result. - errno
- Returns the calling thread’s current
errno. - strerror
- Formats an errno for log messages.