☰

如何在centos6中安装linux/seccomp.h

tag-icon • tag-icon centos seccomp
如何在centos6中安装linux/seccomp.h

看来 kernel-headers rpm 不包含 seccomp.h，我想知道在 centos6 上哪里可以找到 seccomp.h 头文件？

答案1

如果您正在编译依赖于此特定标头的内容，则不太可能将这个标头文件放置到位并使应用程序正常工作，因为内核标头是相互关联和互连的。

kernel-headers-3.10.0-1127.19.1.el7.x86_64.rpmCentOS 7 中包含此文件。这是我能提供的最好的了。

#ifndef _LINUX_SECCOMP_H
#define _LINUX_SECCOMP_H


#include <linux/types.h>


/* Valid values for seccomp.mode and prctl(PR_SET_SECCOMP, <mode>) */
#define SECCOMP_MODE_DISABLED   0 /* seccomp is not in use. */
#define SECCOMP_MODE_STRICT 1 /* uses hard-coded filter. */
#define SECCOMP_MODE_FILTER 2 /* uses user-supplied filter. */

/* Valid operations for seccomp syscall. */
#define SECCOMP_SET_MODE_STRICT     0
#define SECCOMP_SET_MODE_FILTER     1
#define SECCOMP_GET_ACTION_AVAIL    2

/* Valid flags for SECCOMP_SET_MODE_FILTER */
#define SECCOMP_FILTER_FLAG_TSYNC   (1UL << 0)
#define SECCOMP_FILTER_FLAG_SPEC_ALLOW  (1UL << 2)

/*
 * All BPF programs must return a 32-bit value.
 * The bottom 16-bits are for optional return data.
 * The upper 16-bits are ordered from least permissive values to most.
 *
 * The ordering ensures that a min_t() over composed return values always
 * selects the least permissive choice.
 */
#define SECCOMP_RET_KILL    0x00000000U /* kill the task immediately */
#define SECCOMP_RET_TRAP    0x00030000U /* disallow and force a SIGSYS */
#define SECCOMP_RET_ERRNO   0x00050000U /* returns an errno */
#define SECCOMP_RET_TRACE   0x7ff00000U /* pass to a tracer or disallow */
#define SECCOMP_RET_ALLOW   0x7fff0000U /* allow */

/* Masks for the return value sections. */
#define SECCOMP_RET_ACTION  0x7fff0000U
#define SECCOMP_RET_DATA    0x0000ffffU

/**
 * struct seccomp_data - the format the BPF program executes over.
 * @nr: the system call number
 * @arch: indicates system call convention as an AUDIT_ARCH_* value
 *        as defined in <linux/audit.h>.
 * @instruction_pointer: at the time of the system call.
 * @args: up to 6 system call arguments always stored as 64-bit values
 *        regardless of the architecture.
 */
struct seccomp_data {
    int nr;
    __u32 arch;
    __u64 instruction_pointer;
    __u64 args[6];
};

#endif /* _LINUX_SECCOMP_H */

相关内容