Action values for seccomp BPF programs. The lower 16-bits are for optional return data. The upper 16-bits are ordered from least permissive values to most.

Values

ACTION
comptime_int
ACTION_FULL
comptime_int
ALLOW
comptime_int

Allow.

DATA
comptime_int
ERRNO
comptime_int

Return an errno.

KILL
comptime_int
KILL_PROCESS
comptime_int

Kill the process.

KILL_THREAD
comptime_int

Kill the thread.

LOG
comptime_int

Allow after logging.

TRACE
comptime_int

Pass to a tracer or disallow.

TRAP
comptime_int

Disallow and force a SIGSYS.

USER_NOTIF
comptime_int

Forward the syscall to a userspace supervisor to make a decision.