forked from seccomp/libseccomp
-
Notifications
You must be signed in to change notification settings - Fork 0
/
arch-x86.c
53 lines (47 loc) · 1.58 KB
/
arch-x86.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
/**
* Enhanced Seccomp x86 Specific Code
*
* Copyright (c) 2012,2016 Red Hat <[email protected]>
* Author: Paul Moore <[email protected]>
*/
/*
* This library is free software; you can redistribute it and/or modify it
* under the terms of version 2.1 of the GNU Lesser General Public License as
* published by the Free Software Foundation.
*
* This library is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
* for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this library; if not, see <https://www.gnu.org/licenses>.
*/
#include <stdlib.h>
#include <errno.h>
#include <string.h>
#include <linux/audit.h>
#include "db.h"
#include "syscalls.h"
#include "arch.h"
#include "arch-x86.h"
/* x86 syscall numbers */
#define __x86_NR_socketcall 102
#define __x86_NR_ipc 117
ARCH_DEF(x86)
const struct arch_def arch_def_x86 = {
.token = SCMP_ARCH_X86,
.token_bpf = AUDIT_ARCH_I386,
.size = ARCH_SIZE_32,
.endian = ARCH_ENDIAN_LITTLE,
.sys_socketcall = __x86_NR_socketcall,
.sys_ipc = __x86_NR_ipc,
.syscall_resolve_name = abi_syscall_resolve_name_munge,
.syscall_resolve_name_raw = x86_syscall_resolve_name,
.syscall_resolve_num = abi_syscall_resolve_num_munge,
.syscall_resolve_num_raw = x86_syscall_resolve_num,
.syscall_rewrite = abi_syscall_rewrite,
.rule_add = abi_rule_add,
.syscall_name_kver = x86_syscall_name_kver,
.syscall_num_kver = x86_syscall_num_kver,
};