* Improvements
* Updated lists of BPF_*, BTRFS_*, KERN_*, KVM_CAP_*, NDA_*, NT_*, PR_*,
- V4L2_*, and *_MAGIC constants.
+ SECCOMP_*, V4L2_*, and *_MAGIC constants.
* Bug fixes
* Fixed strace-k test on alpha.
prog->len = BPF_MAXINSNS + 1;
tprintf("seccomp(SECCOMP_SET_MODE_FILTER, %s, {len=%u, filter=[",
"SECCOMP_FILTER_FLAG_TSYNC|SECCOMP_FILTER_FLAG_LOG|"
- "SECCOMP_FILTER_FLAG_SPEC_ALLOW|0xfffffff8",
+ "SECCOMP_FILTER_FLAG_SPEC_ALLOW|"
+ "SECCOMP_FILTER_FLAG_NEW_LISTENER|0xfffffff0",
prog->len);
for (i = 0; i < BPF_MAXINSNS; ++i) {
if (i)
printf("seccomp(SECCOMP_SET_MODE_FILTER, %s, {len=%u, filter=%p})"
" = %ld %s (%m)\n",
"SECCOMP_FILTER_FLAG_TSYNC|SECCOMP_FILTER_FLAG_LOG|"
- "SECCOMP_FILTER_FLAG_SPEC_ALLOW|0xfffffff8",
+ "SECCOMP_FILTER_FLAG_SPEC_ALLOW|"
+ "SECCOMP_FILTER_FLAG_NEW_LISTENER|0xfffffff0",
prog->len, prog->filter, rc, errno2name());
- rc = syscall(__NR_seccomp, SECCOMP_SET_MODE_FILTER, -8L, efault);
+ rc = syscall(__NR_seccomp, SECCOMP_SET_MODE_FILTER, -16L, efault);
printf("seccomp(SECCOMP_SET_MODE_FILTER, %s, %p) = %ld %s (%m)\n",
- "0xfffffff8 /* SECCOMP_FILTER_FLAG_??? */",
+ "0xfffffff0 /* SECCOMP_FILTER_FLAG_??? */",
efault, rc, errno2name());
puts("+++ exited with 0 +++");
# ifdef SECCOMP_RET_ERRNO
{ ARG_STR(SECCOMP_RET_ERRNO) },
# endif
+# ifdef SECCOMP_RET_USER_NOTIF
+ { ARG_STR(SECCOMP_RET_USER_NOTIF) },
+# endif
# ifdef SECCOMP_RET_TRACE
{ ARG_STR(SECCOMP_RET_TRACE) },
# endif
SECCOMP_FILTER_FLAG_TSYNC 1
SECCOMP_FILTER_FLAG_LOG 2
SECCOMP_FILTER_FLAG_SPEC_ALLOW 4
+SECCOMP_FILTER_FLAG_NEW_LISTENER 8
SECCOMP_SET_MODE_STRICT 0
SECCOMP_SET_MODE_FILTER 1
SECCOMP_GET_ACTION_AVAIL 2
+SECCOMP_GET_NOTIF_SIZES 3
SECCOMP_RET_KILL_THREAD 0
SECCOMP_RET_TRAP 0x00030000U
SECCOMP_RET_ERRNO 0x00050000U
+SECCOMP_RET_USER_NOTIF 0x7fc00000U
SECCOMP_RET_TRACE 0x7ff00000U
SECCOMP_RET_LOG 0x7ffc0000U
SECCOMP_RET_ALLOW 0x7fff0000U