1 #ifndef _LINUX_SECCOMP_H
2 #define _LINUX_SECCOMP_H
4 #include <uapi/linux/seccomp.h>
6 #define SECCOMP_FILTER_FLAG_MASK (SECCOMP_FILTER_FLAG_TSYNC)
10 #include <linux/thread_info.h>
11 #include <asm/seccomp.h>
13 struct seccomp_filter
;
15 * struct seccomp - the state of a seccomp'ed process
17 * @mode: indicates one of the valid values above for controlled
18 * system calls available to a process.
19 * @filter: must always point to a valid seccomp-filter or NULL as it is
20 * accessed without locking during system call entry.
22 * @filter must only be accessed from the context of current as there
27 struct seccomp_filter
*filter
;
30 #ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTER
31 extern int __secure_computing(void);
32 static inline int secure_computing(void)
34 if (unlikely(test_thread_flag(TIF_SECCOMP
)))
35 return __secure_computing();
39 #define SECCOMP_PHASE1_OK 0
40 #define SECCOMP_PHASE1_SKIP 1
42 extern u32
seccomp_phase1(struct seccomp_data
*sd
);
43 int seccomp_phase2(u32 phase1_result
);
45 extern void secure_computing_strict(int this_syscall
);
48 extern long prctl_get_seccomp(void);
49 extern long prctl_set_seccomp(unsigned long, char __user
*);
51 static inline int seccomp_mode(struct seccomp
*s
)
56 #else /* CONFIG_SECCOMP */
58 #include <linux/errno.h>
61 struct seccomp_filter
{ };
63 #ifdef CONFIG_HAVE_ARCH_SECCOMP_FILTER
64 static inline int secure_computing(void) { return 0; }
66 static inline void secure_computing_strict(int this_syscall
) { return; }
69 static inline long prctl_get_seccomp(void)
74 static inline long prctl_set_seccomp(unsigned long arg2
, char __user
*arg3
)
79 static inline int seccomp_mode(struct seccomp
*s
)
83 #endif /* CONFIG_SECCOMP */
85 #ifdef CONFIG_SECCOMP_FILTER
86 extern void put_seccomp_filter(struct task_struct
*tsk
);
87 extern void get_seccomp_filter(struct task_struct
*tsk
);
88 #else /* CONFIG_SECCOMP_FILTER */
89 static inline void put_seccomp_filter(struct task_struct
*tsk
)
93 static inline void get_seccomp_filter(struct task_struct
*tsk
)
97 #endif /* CONFIG_SECCOMP_FILTER */
98 #endif /* _LINUX_SECCOMP_H */
This page took 0.033459 seconds and 5 git commands to generate.