Module seccomp 

Seccomp filter utilities.

Enums

InstallationError

Filter installation errors.

Constants

BPF_MAX_LEN

The maximum seccomp-BPF program length allowed by the linux kernel.

Functions

apply_filter

Apply bpf filter.

deserialize_binary

Deserialize binary with bpf filters

get_empty_filters

Retrieve empty seccomp filters.

Type Aliases

BpfInstruction

Each BPF instruction is 8 bytes long and 4 byte aligned. This alignment needs to be satisfied in order for a BPF code to be accepted by the syscalls. Using u64 here is is safe as it has same size and even bigger alignment.

BpfProgram

Program made up of a sequence of BPF instructions.

BpfProgramRef

Reference to program made up of a sequence of BPF instructions.

BpfThreadMap

Type that associates a thread category to a BPF program.

DeserializationError

Binary filter deserialization errors.