@@ -577,6 +577,34 @@ s! {
577
577
pub args: [ :: __u64; 6 ] ,
578
578
}
579
579
580
+ pub struct seccomp_notif_sizes {
581
+ pub seccomp_notif: :: __u16,
582
+ pub seccomp_notif_resp: :: __u16,
583
+ pub seccomp_data: :: __u16,
584
+ }
585
+
586
+ pub struct seccomp_notif {
587
+ pub id: :: __u64,
588
+ pub pid: :: __u32,
589
+ pub flags: :: __u32,
590
+ pub data: seccomp_data,
591
+ }
592
+
593
+ pub struct seccomp_notif_resp {
594
+ pub id: :: __u64,
595
+ pub val: :: __s64,
596
+ pub error: :: __s32,
597
+ pub flags: :: __u32,
598
+ }
599
+
600
+ pub struct seccomp_notif_addfd {
601
+ pub id: :: __u64,
602
+ pub flags: :: __u32,
603
+ pub srcfd: :: __u32,
604
+ pub newfd: :: __u32,
605
+ pub newfd_flags: :: __u32,
606
+ }
607
+
580
608
pub struct nlmsghdr {
581
609
pub nlmsg_len: u32 ,
582
610
pub nlmsg_type: u16 ,
@@ -2187,13 +2215,22 @@ pub const GRND_NONBLOCK: ::c_uint = 0x0001;
2187
2215
pub const GRND_RANDOM : :: c_uint = 0x0002 ;
2188
2216
pub const GRND_INSECURE : :: c_uint = 0x0004 ;
2189
2217
2218
+ // <linux/seccomp.h>
2190
2219
pub const SECCOMP_MODE_DISABLED : :: c_uint = 0 ;
2191
2220
pub const SECCOMP_MODE_STRICT : :: c_uint = 1 ;
2192
2221
pub const SECCOMP_MODE_FILTER : :: c_uint = 2 ;
2193
2222
2223
+ pub const SECCOMP_SET_MODE_STRICT : :: c_uint = 0 ;
2224
+ pub const SECCOMP_SET_MODE_FILTER : :: c_uint = 1 ;
2225
+ pub const SECCOMP_GET_ACTION_AVAIL : :: c_uint = 2 ;
2226
+ pub const SECCOMP_GET_NOTIF_SIZES : :: c_uint = 3 ;
2227
+
2194
2228
pub const SECCOMP_FILTER_FLAG_TSYNC : :: c_ulong = 1 ;
2195
2229
pub const SECCOMP_FILTER_FLAG_LOG : :: c_ulong = 2 ;
2196
2230
pub const SECCOMP_FILTER_FLAG_SPEC_ALLOW : :: c_ulong = 4 ;
2231
+ pub const SECCOMP_FILTER_FLAG_NEW_LISTENER : :: c_ulong = 8 ;
2232
+ pub const SECCOMP_FILTER_FLAG_TSYNC_ESRCH : :: c_ulong = 16 ;
2233
+ pub const SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV : :: c_ulong = 32 ;
2197
2234
2198
2235
pub const SECCOMP_RET_KILL_PROCESS : :: c_uint = 0x80000000 ;
2199
2236
pub const SECCOMP_RET_KILL_THREAD : :: c_uint = 0x00000000 ;
@@ -2208,6 +2245,11 @@ pub const SECCOMP_RET_ACTION_FULL: ::c_uint = 0xffff0000;
2208
2245
pub const SECCOMP_RET_ACTION : :: c_uint = 0x7fff0000 ;
2209
2246
pub const SECCOMP_RET_DATA : :: c_uint = 0x0000ffff ;
2210
2247
2248
+ pub const SECCOMP_USER_NOTIF_FLAG_CONTINUE : :: c_ulong = 1 ;
2249
+
2250
+ pub const SECCOMP_ADDFD_FLAG_SETFD : :: c_ulong = 1 ;
2251
+ pub const SECCOMP_ADDFD_FLAG_SEND : :: c_ulong = 2 ;
2252
+
2211
2253
pub const ITIMER_REAL : :: c_int = 0 ;
2212
2254
pub const ITIMER_VIRTUAL : :: c_int = 1 ;
2213
2255
pub const ITIMER_PROF : :: c_int = 2 ;
0 commit comments