selftests/seccomp/seccomp_bpf.c

394 	struct sock_fprog prog = {
407 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
428 	struct sock_fprog prog = { };
440 	prog.filter = filter;
441 	prog.len = count;
444 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
446 		TH_LOG("Installing %d insn filter was allowed", prog.len);
450 	prog.len -= 1;
451 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
453 		TH_LOG("Installing %d insn filter wasn't allowed", prog.len);
465 	struct sock_fprog prog = { };
477 	prog.filter = filter;
478 	prog.len = 1;
480 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
483 	prog.len = count;
487 		ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
502 	struct sock_fprog prog = {
511 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
525 	struct sock_fprog prog = {
537 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
550 	struct sock_fprog prog = {
559 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
567 	struct sock_fprog prog = {
576 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
586 	struct sock_fprog prog = {
596 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
608 	struct sock_fprog prog = {
617 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
630 	struct sock_fprog prog = {
639 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
651 	struct sock_fprog prog = {
660 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
673 	struct sock_fprog prog = {
683 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
706 	struct sock_fprog prog = {
718 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
745 	struct sock_fprog prog = {
760 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
930 	struct sock_fprog prog = {
939 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog);
1047 	struct sock_fprog prog;
1060 	memset(&self->prog, 0, sizeof(self->prog));
1061 	self->prog.filter = malloc(sizeof(filter));
1062 	ASSERT_NE(NULL, self->prog.filter);
1063 	memcpy(self->prog.filter, filter, sizeof(filter));
1064 	self->prog.len = (unsigned short)ARRAY_SIZE(filter);
1069 	if (self->prog.filter)
1070 		free(self->prog.filter);
1080 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &self->prog);
1095 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &self->prog);
1131 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &self->prog);
1658 	struct sock_fprog prog;
1675 	memset(&self->prog, 0, sizeof(self->prog));
1676 	self->prog.filter = malloc(sizeof(filter));
1677 	ASSERT_NE(NULL, self->prog.filter);
1678 	memcpy(self->prog.filter, filter, sizeof(filter));
1679 	self->prog.len = (unsigned short)ARRAY_SIZE(filter);
1692 	if (self->prog.filter)
1693 		free(self->prog.filter);
1703 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &self->prog, 0, 0);
1719 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &self->prog, 0, 0);
2035 	struct sock_fprog prog;
2142 	struct sock_fprog prog = {
2176 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
2243 	struct sock_fprog prog = {
2250 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
2266 	struct sock_fprog prog = {
2273 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
2291 	struct sock_fprog prog = {
2298 	ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
2310 	struct sock_fprog prog = {
2322 	ret = seccomp(-1, 0, &prog);
2335 	ret = seccomp(SECCOMP_SET_MODE_STRICT, 0, &prog);
2341 	ret = seccomp(SECCOMP_SET_MODE_FILTER, -1, &prog);
2350 	ret = seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog);
2362 	struct sock_fprog prog = {
2373 	ret = seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog);
2489 	struct sock_fprog prog = {
2501 		      &prog);
2519 	struct sock_fprog *prog;
2585 	self->sibling[0].prog = &self->root_prog;
2592 	self->sibling[1].prog = &self->root_prog;
2631 		/* Just re-apply the root prog to fork the tree */
2633 				me->prog, 0, 0);
2670 	struct sock_fprog prog = {
2680 	ret = seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog);
3035 	struct sock_fprog prog = {
3062 		ret = prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog, 0, 0);
3294 		struct sock_fprog prog = {
3301 				     SECCOMP_FILTER_FLAG_LOG, &prog));
3302 		EXPECT_EQ(0, seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog));
3351 	struct sock_fprog prog = {
3356 	return seccomp(SECCOMP_SET_MODE_FILTER, flags, &prog);
3372 	struct sock_fprog prog = {
3398 	EXPECT_EQ(seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog), 0);
3399 	EXPECT_EQ(seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog), 0);
3400 	EXPECT_EQ(seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog), 0);
3401 	EXPECT_EQ(seccomp(SECCOMP_SET_MODE_FILTER, 0, &prog), 0);