Action values for seccomp BPF programs. The lower 16-bits are for optional return data. The upper 16-bits are ordered from least permissive values to most.
Values
ACTION | comptime_int | |
ACTION_FULL | comptime_int | |
ALLOW | comptime_int | Allow. |
DATA | comptime_int | |
ERRNO | comptime_int | Return an errno. |
KILL | comptime_int | |
KILL_PROCESS | comptime_int | Kill the process. |
KILL_THREAD | comptime_int | Kill the thread. |
LOG | comptime_int | Allow after logging. |
TRACE | comptime_int | Pass to a tracer or disallow. |
TRAP | comptime_int | Disallow and force a SIGSYS. |
USER_NOTIF | comptime_int | Forward the syscall to a userspace supervisor to make a decision. |