From nobody Thu Apr 9 07:52:25 2026 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3A2DCC4332F for ; Thu, 3 Nov 2022 12:54:37 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231465AbiKCMyf (ORCPT ); Thu, 3 Nov 2022 08:54:35 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:39020 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230513AbiKCMyb (ORCPT ); Thu, 3 Nov 2022 08:54:31 -0400 Received: from out0.migadu.com (out0.migadu.com [94.23.1.103]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 4215B110B; Thu, 3 Nov 2022 05:54:30 -0700 (PDT) X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lirui.org; s=key1; t=1667480068; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=0Hf5Aek1vKhxN0KhblGp02NdBy4ARQmgNfkIiSJnavc=; b=fLvrxU9QPBCI7pky9fAHHWg603LgxPMZPR969AnEMS6yn3kHh9nD7jjn1NFAbMjinSr469 mlEiBTPxShW9v8yjyDo9YJrliFjium8unzxP4b4q5kgCFbV1/cdDXRiz7uFe3dfQcxw0a/ Fb96fxWIrYl7psA+yXsdDro/R8oQDIPCqOt0nZiI+QJ6jwPc988axzfzMe1imw6iwldHYb 7Xcnx5DB8ccvSYNp6aWbTLI+I+vOKl6i62UBX5pWEc2ZHkEelDLV8lDdOPCTo4hR4Ce6Ey SPU91dfwylRzj7DcMIPX3vCwH29+q+WrK/LjQWOstSn8u1VSG13GVgB0rHIVkw== From: Rui Li To: Alex Shi , Yanteng Si Cc: Jonathan Corbet , Wu XiangCheng , linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, Rui Li Subject: [PATCH v2] docs/zh_CN: Add userspace-api/seccomp_filter Chinese translation Date: Thu, 3 Nov 2022 20:54:01 +0800 Message-Id: <20221103125401.264025-1-me@lirui.org> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Migadu-Flow: FLOW_OUT Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Translate the following documents into Chinese: - userspace-api/seccomp_filter.rst Also adjust index order according to the original index file. Signed-off-by: Rui Li --- Changes since v1: - Add a note for Seccomp. - Fix some typo. --- .../zh_CN/userspace-api/index.rst | 4 +- .../zh_CN/userspace-api/seccomp_filter.rst | 293 ++++++++++++++++++ 2 files changed, 295 insertions(+), 2 deletions(-) create mode 100644 Documentation/translations/zh_CN/userspace-api/seccomp_= filter.rst diff --git a/Documentation/translations/zh_CN/userspace-api/index.rst b/Doc= umentation/translations/zh_CN/userspace-api/index.rst index 0f3483a46fa2..dad5ba7cae6d 100644 --- a/Documentation/translations/zh_CN/userspace-api/index.rst +++ b/Documentation/translations/zh_CN/userspace-api/index.rst @@ -24,13 +24,13 @@ Linux =E5=86=85=E6=A0=B8=E7=94=A8=E6=88=B7=E7=A9=BA=E9= =97=B4API=E6=8C=87=E5=8D=97 .. toctree:: :maxdepth: 2 =20 - ebpf/index no_new_privs + seccomp_filter + ebpf/index sysfs-platform_profile =20 TODOList: =20 -* seccomp_filter * landlock * unshare * spec_ctrl diff --git a/Documentation/translations/zh_CN/userspace-api/seccomp_filter.= rst b/Documentation/translations/zh_CN/userspace-api/seccomp_filter.rst new file mode 100644 index 000000000000..f8e5deb5e39a --- /dev/null +++ b/Documentation/translations/zh_CN/userspace-api/seccomp_filter.rst @@ -0,0 +1,293 @@ +.. SPDX-License-Identifier: GPL-2.0 +.. include:: ../disclaimer-zh_CN.rst + +:Original: Documentation/userspace-api/seccomp_filter.rst + +:=E7=BF=BB=E8=AF=91: + + =E6=9D=8E=E7=9D=BF Rui Li + +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D +Seccomp BPF (=E5=9F=BA=E4=BA=8E=E8=BF=87=E6=BB=A4=E5=99=A8=E7=9A=84=E5=AE= =89=E5=85=A8=E8=AE=A1=E7=AE=97) +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D + +*Seccomp: SECure COMPuting* + +=E4=BB=8B=E7=BB=8D +=3D=3D=3D=3D + +=E5=A4=A7=E9=87=8F=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E8=A2=AB=E6=9A=B4= =E9=9C=B2=E7=BB=99=E6=AF=8F=E4=B8=AA=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E8= =BF=9B=E7=A8=8B=EF=BC=8C=E4=BD=86=E5=85=B6=E4=B8=AD=E5=8F=88=E6=9C=89=E8=AE= =B8=E5=A4=9A=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=9C=A8=E8=BF=9B=E7=A8=8B= =E7=9A=84=E6=95=B4=E4=B8=AA=E7=94=9F=E5=91=BD +=E5=91=A8=E6=9C=9F=E4=B8=AD=E9=83=BD=E6=B2=A1=E8=A2=AB=E4=BD=BF=E7=94=A8= =E3=80=82=E9=9A=8F=E7=9D=80=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E7=9A=84=E6= =94=B9=E5=8F=98=E5=92=8C=E6=88=90=E7=86=9F=EF=BC=8C=E7=BC=BA=E9=99=B7=E8=A2= =AB=E6=89=BE=E5=88=B0=E5=B9=B6=E6=B6=88=E9=99=A4=E3=80=82=E5=85=81=E8=AE=B8= =E6=9F=90=E4=B8=80=E9=83=A8=E5=88=86=E5=BA=94 +=E7=94=A8=E7=A8=8B=E5=BA=8F=E4=BB=85=E8=83=BD=E8=AE=BF=E9=97=AE=E4=B8=80= =E9=83=A8=E5=88=86=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E6=98=AF=E6=9C=89=E5= =A5=BD=E5=A4=84=E7=9A=84=EF=BC=8C=E8=BF=99=E4=BC=9A=E5=87=8F=E5=B0=91=E5=86= =85=E6=A0=B8=E6=9A=B4=E9=9C=B2=E7=BB=99=E5=BA=94=E7=94=A8=E7=A8=8B=E5=BA=8F= =E7=9A=84=E9=9D=A2=E7=A7=AF=E3=80=82 +=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E8=BF=87=E6=BB=A4=E5=99=A8=E5=B0=B1= =E6=98=AF=E4=B8=BA=E8=BF=99=E4=BA=9B=E5=BA=94=E7=94=A8=E7=A8=8B=E5=BA=8F=E8= =80=8C=E7=94=9F=E7=9A=84=E3=80=82 + +Seccomp=E8=BF=87=E6=BB=A4=E6=8F=90=E4=BE=9B=E4=BA=86=E4=B8=80=E7=A7=8D=E4= =B8=BA=E8=BF=9B=E7=A8=8B=E6=8C=87=E5=AE=9A=E4=B8=80=E4=B8=AA=E5=A4=84=E7=90= =86=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E7=9A=84=E8=BF=87=E6=BB=A4=E5=99=A8= =E7=9A=84=E6=96=B9=E6=B3=95=E3=80=82=E8=BF=99=E4=B8=AA=E8=BF=87=E6=BB=A4=E5= =99=A8=E4=BD=93 +=E7=8E=B0=E4=B8=BA=E4=B8=80=E4=B8=AA=E4=BC=AF=E5=85=8B=E5=88=A9=E5=8C=85= =E8=BF=87=E6=BB=A4=E5=99=A8=EF=BC=88BPF=EF=BC=89=E7=A8=8B=E5=BA=8F=EF=BC=8C= =E5=B0=B1=E5=83=8F=E5=A5=97=E6=8E=A5=E5=AD=97=E8=BF=87=E6=BB=A4=E5=99=A8=E4= =B8=80=E6=A0=B7=EF=BC=8C=E4=B8=8D=E5=90=8C=E5=9C=A8=E4=BA=8E=E5=89=8D=E8=80= =85=E5=A4=84=E7=90=86=E7=9A=84 +=E6=95=B0=E6=8D=AE=E5=92=8C=E6=AD=A3=E5=9C=A8=E8=BF=9B=E8=A1=8C=E7=9A=84= =E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E6=9C=89=E5=85=B3=EF=BC=9A=E7=B3=BB=E7= =BB=9F=E8=B0=83=E7=94=A8=E5=8F=B7=E5=92=8C=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94= =A8=E5=8F=82=E6=95=B0=E3=80=82=E8=BF=99=E6=A0=B7=E4=BD=BF=E7=94=A8=E4=B8=80= =E7=A7=8D=E9=95=BF=E6=9C=9F=E4=B8=8E +=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E5=92=8C=E7=9B=B4=E6=8E=A5=E6=95=B0= =E6=8D=AE=E6=89=93=E4=BA=A4=E9=81=93=E7=9A=84=E8=AF=AD=E8=A8=80=E6=9D=A5=E8= =A1=A8=E8=BE=BE=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E8=BF=87=E6=BB=A4=E6=88= =90=E4=B8=BA=E4=BA=86=E5=8F=AF=E8=83=BD=E3=80=82 + +=E6=AD=A4=E5=A4=96=EF=BC=8CBPF=E8=AE=A9seccomp=E7=94=A8=E6=88=B7=E4=B8=8D= =E5=86=8D=E6=88=90=E4=B8=BA=E5=9C=A8=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E4= =B8=AD=E4=BB=8B=E6=A1=86=E6=9E=B6=E4=B8=AD=E5=B8=B8=E8=A7=81=E7=9A=84=E6=A3= =80=E6=9F=A5-=E4=BD=BF=E7=94=A8=E7=AB=9E=E6=80=81=E6=94=BB=E5=87=BB +=EF=BC=88TOCTOU=EF=BC=89=E7=9A=84=E5=8F=97=E5=AE=B3=E8=80=85=E3=80=82BPF= =E7=A8=8B=E5=BA=8F=E5=8F=AF=E8=83=BD=E6=97=A0=E6=B3=95=E8=A7=A3=E5=BC=95=E7= =94=A8=E6=8C=87=E9=92=88=EF=BC=8C=E8=BF=99=E5=B0=B1=E9=99=90=E5=88=B6=E4=BA= =86=E6=89=80=E6=9C=89=E8=BF=87=E6=BB=A4=E5=99=A8=E4=BB=85=E8=83=BD=E7=9B=B4= =E6=8E=A5 +=E8=AF=84=E4=BC=B0=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=8F=82=E6=95=B0= =E3=80=82 + +=E8=BF=99=E4=B8=8D=E6=98=AF=E4=BB=80=E4=B9=88 +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D + +=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E8=BF=87=E6=BB=A4=E5=B9=B6=E4=B8=8D= =E6=98=AF=E4=B8=80=E4=B8=AA=E6=B2=99=E7=AE=B1=E3=80=82=E5=AE=83=E6=8F=90=E4= =BE=9B=E4=BA=86=E4=B8=80=E7=A7=8D=E6=98=8E=E7=A1=AE=E5=AE=9A=E4=B9=89=E7=9A= =84=E6=9C=BA=E5=88=B6=E6=9D=A5=E6=9C=80=E5=B0=8F=E5=8C=96=E5=86=85=E6=A0=B8= =E6=9A=B4=E9=9C=B2=E9=9D=A2=E3=80=82=E5=AE=83 +=E6=97=A8=E5=9C=A8=E6=88=90=E4=B8=BA=E4=B8=80=E4=B8=AA=E6=B2=99=E7=AE=B1= =E5=BC=80=E5=8F=91=E8=80=85=E4=BD=BF=E7=94=A8=E7=9A=84=E5=B7=A5=E5=85=B7=E3= =80=82=E9=99=A4=E6=AD=A4=E4=B9=8B=E5=A4=96=EF=BC=8C=E9=80=BB=E8=BE=91=E8=A1= =8C=E4=B8=BA=E5=92=8C=E4=BF=A1=E6=81=AF=E6=B5=81=E7=9A=84=E7=AD=96=E7=95=A5= =E5=BA=94=E8=AF=A5=E7=BB=93=E5=90=88=E5=85=B6=E4=BB=96 +=E7=B3=BB=E7=BB=9F=E5=8A=A0=E5=9B=BA=E6=89=8B=E6=AE=B5=E6=88=96=E8=80=85= =E5=8F=AF=E8=83=BD=E7=94=B1=E4=BD=A0=E9=80=89=E6=8B=A9=E7=9A=84=E5=86=85=E6= =A0=B8=E5=AE=89=E5=85=A8=E6=A8=A1=E5=9D=97=EF=BC=88LSM=EF=BC=89=E6=9D=A5=E7= =AE=A1=E7=90=86=E3=80=82=E6=98=93=E4=BA=8E=E8=A1=A8=E8=BE=BE=E7=9A=84=E5=8A= =A8=E6=80=81=E8=BF=87=E6=BB=A4=E5=99=A8 +=E4=B8=BA=E8=BF=99=E6=9D=A1=E8=B7=AF=E6=8F=90=E4=BE=9B=E4=BA=86=E6=9B=B4= =E5=A4=9A=E9=80=89=E6=8B=A9=EF=BC=88=E6=AF=94=E5=A6=82=E9=81=BF=E5=85=8D=E7= =97=85=E6=80=81=E7=9A=84=E5=A4=A7=E5=B0=8F=E6=88=96=E8=80=85=E9=80=89=E6=8B= =A9=E5=85=81=E8=AE=B8 socketcall() =E4=B8=AD=E7=9A=84=E5=A4=9A=E8=B7=AF +=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=EF=BC=89=EF=BC=8C=E4=BD=86=E5=B0=86= =E5=85=B6=E7=90=86=E8=A7=A3=E4=B8=BA=E6=9B=B4=E5=AE=8C=E6=95=B4=E7=9A=84=E6= =B2=99=E7=AE=B1=E8=A7=A3=E5=86=B3=E6=96=B9=E6=A1=88=E6=98=AF=E9=94=99=E8=AF= =AF=E7=9A=84=E3=80=82 + +=E7=94=A8=E6=B3=95 +=3D=3D=3D=3D + +=E6=B7=BB=E5=8A=A0=E4=BA=86=E4=B8=80=E4=B8=AA=E9=A2=9D=E5=A4=96=E7=9A=84se= ccomp=E6=A8=A1=E5=BC=8F=EF=BC=8C=E5=AE=83=E5=8F=AF=E4=BB=A5=E4=BD=BF=E7=94= =A8=E5=92=8C=E4=B8=A5=E6=A0=BCseccomp=E7=9B=B8=E5=90=8C=E7=9A=84 prctl(2) = =E8=B0=83=E7=94=A8=E6=9D=A5=E5=90=AF=E7=94=A8=E3=80=82 +=E5=A6=82=E6=9E=9C=E6=9E=B6=E6=9E=84=E6=9C=89 ``CONFIG_HAVE_ARCH_SECCOMP_F= ILTER`` =E6=A0=87=E5=BF=97=EF=BC=8C=E9=82=A3=E4=B9=88=E5=8F=AF=E4=BB=A5=E6= =B7=BB=E5=8A=A0=E4=BB=A5=E4=B8=8B=E8=BF=87=E6=BB=A4=E5=99=A8=EF=BC=9A + +``PR_SET_SECCOMP``: + =E7=8E=B0=E5=9C=A8=E9=9C=80=E8=A6=81=E6=B7=BB=E5=8A=A0=E4=B8=80=E4=B8=AA= =E9=A2=9D=E5=A4=96=E7=9A=84=E5=8F=82=E6=95=B0=E6=9D=A5=E6=8C=87=E5=AE=9A=E4= =BD=BF=E7=94=A8BPF=E7=A8=8B=E5=BA=8F=E7=9A=84=E6=96=B0=E8=BF=87=E6=BB=A4=E5= =99=A8=E3=80=82 + BPF=E7=A8=8B=E5=BA=8F=E5=B0=86=E5=9C=A8=E5=8F=8D=E5=BA=94=E7=B3=BB=E7=BB= =9F=E8=B0=83=E7=94=A8=E5=8F=B7=EF=BC=8C=E5=8F=82=E6=95=B0=E5=92=8C=E5=85=B6= =E4=BB=96=E5=85=83=E6=95=B0=E6=8D=AE=E7=9A=84seccomp_data=E7=BB=93=E6=9E=84= =E4=BD=93=E4=B9=8B=E4=B8=8A=E6=89=A7=E8=A1=8C=E3=80=82 + BPF=E7=A8=8B=E5=BA=8F=E5=BF=85=E9=A1=BB=E8=BF=94=E5=9B=9E=E5=85=81=E8=AE= =B8=E7=9A=84=E5=80=BC=E4=B9=8B=E4=B8=80=E6=9D=A5=E5=91=8A=E7=9F=A5=E5=86=85= =E6=A0=B8=E5=BA=94=E8=AF=A5=E9=87=87=E5=8F=96=E4=BB=80=E4=B9=88=E8=A1=8C=E5= =8A=A8=E3=80=82 + + =E7=94=A8=E6=B3=95:: + + prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, prog); + + 'prog' =E5=8F=82=E6=95=B0=E6=98=AF=E4=B8=80=E4=B8=AA=E6=8C=87=E5=90=91 so= ck_fprog =E7=BB=93=E6=9E=84=E4=BD=93=E7=9A=84=E6=8C=87=E9=92=88=EF=BC=8C=E5= =85=B6=E4=B8=AD=E5=8C=85=E5=90=AB=E4=BA=86=E8=BF=87=E6=BB=A4=E5=99=A8=E7=A8= =8B=E5=BA=8F=E3=80=82=E5=A6=82 + =E6=9E=9C=E7=A8=8B=E5=BA=8F=E6=98=AF=E6=97=A0=E6=95=88=E7=9A=84=EF=BC=8C= =E8=AF=A5=E8=B0=83=E7=94=A8=E4=BC=9A=E8=BF=94=E5=9B=9E -1 =E5=B9=B6=E8=AE= =BE=E7=BD=AE errno =E4=B8=BA ``EINVAL`` =E3=80=82 + + =E5=A6=82=E6=9E=9C ``fork`` / ``clone`` =E5=92=8C ``execve`` =E8=A2=AB @p= rog =E6=89=80=E5=85=81=E8=AE=B8=EF=BC=8C=E4=BB=BB=E4=BD=95=E5=AD=90=E8=BF= =9B=E7=A8=8B=E9=83=BD=E5=B0=86 + =E5=8F=97=E5=88=B0=E5=92=8C=E7=88=B6=E8=BF=9B=E7=A8=8B=E7=9B=B8=E5=90=8C= =E7=9A=84=E8=BF=87=E6=BB=A4=E5=99=A8=E5=92=8C=E7=B3=BB=E7=BB=9F=E8=B0=83=E7= =94=A8ABI=E7=9A=84=E7=BA=A6=E6=9D=9F=E3=80=82 + + =E5=9C=A8=E8=B0=83=E7=94=A8=E4=B9=8B=E5=89=8D=EF=BC=8C=E4=BB=BB=E5=8A=A1= =E5=BF=85=E9=A1=BB=E8=B0=83=E7=94=A8 ``prctl(PR_SET_NO_NEW_PRIVS, 1)`` =E6= =88=96=E8=80=85=E5=9C=A8=E5=AE=83=E7=9A=84 + =E5=91=BD=E5=90=8D=E7=A9=BA=E9=97=B4=E5=86=85=E4=BB=A5 ``CAP_SYS_ADMIN`` = =E6=9D=83=E9=99=90=E8=BF=90=E8=A1=8C=E3=80=82=E5=A6=82=E6=9E=9C=E4=BB=A5=E4= =B8=8A=E6=9D=A1=E4=BB=B6=E4=B8=8D=E6=BB=A1=E8=B6=B3=EF=BC=8C=E4=BC=9A=E8=BF= =94=E5=9B=9E + ``-EACCES`` =E3=80=82=E8=BF=99=E4=B8=80=E8=A6=81=E6=B1=82=E4=BF=9D=E8=AF= =81=E4=BA=86=E8=BF=87=E6=BB=A4=E5=99=A8=E7=A8=8B=E5=BA=8F=E4=B8=8D=E8=83=BD= =E7=94=A8=E4=BA=8E=E6=AF=94=E5=AE=89=E8=A3=85=E8=BF=87=E6=BB=A4=E5=99=A8=E7= =9A=84=E4=BB=BB=E5=8A=A1=E6=8B=A5=E6=9C=89=E6=9B=B4=E9=AB=98 + =E6=9D=83=E9=99=90=E7=9A=84=E5=AD=90=E8=BF=9B=E7=A8=8B=E3=80=82 + + =E5=8F=A6=E5=A4=96=EF=BC=8C=E5=A6=82=E6=9E=9C ``prctl(2)`` =E8=A2=AB=E5= =AE=89=E8=A3=85=E7=9A=84=E8=BF=87=E6=BB=A4=E5=99=A8=E6=89=80=E5=85=81=E8=AE= =B8=EF=BC=8C=E5=B0=B1=E5=8F=AF=E4=BB=A5=E5=8F=A0=E5=8A=A0=E9=A2=9D=E5=A4=96= =E7=9A=84=E8=BF=87=E6=BB=A4=E5=99=A8=E3=80=82=E8=BF=99=E4=BC=9A=E5=A2=9E + =E5=8A=A0=E8=AF=84=E4=BC=B0=E6=97=B6=E9=97=B4=EF=BC=8C=E4=BD=86=E6=98=AF= =E5=8F=AF=E4=BB=A5=E8=BF=9B=E4=B8=80=E6=AD=A5=E9=99=8D=E4=BD=8E=E6=89=A7=E8= =A1=8C=E8=BF=9B=E7=A8=8B=E6=97=B6=E7=9A=84=E6=94=BB=E5=87=BB=E9=9D=A2=E3=80= =82 + +=E4=BB=A5=E4=B8=8A=E8=B0=83=E7=94=A8=E5=9C=A8=E6=88=90=E5=8A=9F=E6=97=B6= =E8=BF=94=E5=9B=9E0=EF=BC=8C=E5=A4=B1=E8=B4=A5=E6=97=B6=E8=BF=94=E5=9B=9E= =E4=B8=80=E4=B8=AA=E9=9D=9E=E9=9B=B6=E7=9A=84=E5=80=BC=E3=80=82 + +=E8=BF=94=E5=9B=9E=E5=80=BC +=3D=3D=3D=3D=3D=3D + +=E4=B8=80=E4=B8=AAseccomp=E8=BF=87=E6=BB=A4=E5=99=A8=E5=8F=AF=E8=83=BD=E8= =BF=94=E5=9B=9E=E4=B8=8B=E5=88=97=E4=BB=BB=E6=84=8F=E5=80=BC=E3=80=82=E5=A6= =82=E6=9E=9C=E5=A4=9A=E4=B8=AA=E8=BF=87=E6=BB=A4=E5=99=A8=E5=AD=98=E5=9C=A8= =EF=BC=8C=E8=AF=84=E4=BC=B0=E4=B8=80=E4=B8=AA=E6=8C=87=E5=AE=9A=E7=B3=BB=E7= =BB=9F=E8=B0=83=E7=94=A8=E7=9A=84 +=E8=BF=94=E5=9B=9E=E5=80=BC=E6=80=BB=E4=BC=9A=E4=BD=BF=E7=94=A8=E6=9C=80= =E9=AB=98=E4=BC=98=E5=85=88=E7=BA=A7=E7=9A=84=E5=80=BC=E3=80=82=EF=BC=88=E6= =AF=94=E5=A6=82 ``SECCOMP_RET_KILL_PROCESS`` =E6=80=BB=E6=98=AF=E8=A2=AB=E4= =BC=98=E5=85=88 +=E8=BF=94=E5=9B=9E=E3=80=82=EF=BC=89 + +=E6=8C=89=E7=85=A7=E4=BC=98=E5=85=88=E7=BA=A7=E6=8E=92=E5=BA=8F=EF=BC=8C= =E5=AE=83=E4=BB=AC=E6=98=AF=EF=BC=9A + +``SECCOMP_RET_KILL_PROCESS``: + =E4=BD=BF=E5=BE=97=E6=95=B4=E4=B8=AA=E8=BF=9B=E7=A8=8B=E7=AB=8B=E5=8D=B3= =E7=BB=93=E6=9D=9F=E8=80=8C=E4=B8=8D=E6=89=A7=E8=A1=8C=E7=B3=BB=E7=BB=9F=E8= =B0=83=E7=94=A8=E3=80=82=E8=BF=9B=E7=A8=8B=E7=9A=84=E9=80=80=E5=87=BA=E7=8A= =B6=E6=80=81 (``status & 0x7f``) =E5=B0=86 + =E6=98=AF ``SIGSYS`` =EF=BC=8C=E8=80=8C=E4=B8=8D=E6=98=AF ``SIGKILL`` =E3= =80=82 + +``SECCOMP_RET_KILL_THREAD``: + =E4=BD=BF=E5=BE=97=E4=BB=BB=E5=8A=A1=E7=AB=8B=E5=8D=B3=E7=BB=93=E6=9D=9F= =E8=80=8C=E4=B8=8D=E6=89=A7=E8=A1=8C=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E3= =80=82=E4=BB=BB=E5=8A=A1=E7=9A=84=E9=80=80=E5=87=BA=E7=8A=B6=E6=80=81 (``st= atus & 0x7f``) =E5=B0=86=E6=98=AF + =E6=98=AF ``SIGSYS`` =EF=BC=8C=E8=80=8C=E4=B8=8D=E6=98=AF ``SIGKILL`` =E3= =80=82 + +``SECCOMP_RET_TRAP``: + =E4=BD=BF=E5=BE=97=E5=86=85=E6=A0=B8=E5=90=91=E8=A7=A6=E5=8F=91=E4=BB=BB= =E5=8A=A1=E5=8F=91=E9=80=81=E4=B8=80=E4=B8=AA ``SIGSYS`` =E4=BF=A1=E5=8F=B7= =E8=80=8C=E4=B8=8D=E6=89=A7=E8=A1=8C=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E3= =80=82 + ``siginfo->si_call_addr`` =E4=BC=9A=E5=B1=95=E7=A4=BA=E7=B3=BB=E7=BB=9F= =E8=B0=83=E7=94=A8=E6=8C=87=E4=BB=A4=E7=9A=84=E4=BD=8D=E7=BD=AE=EF=BC=8C ``= siginfo->si_syscall`` + =E5=92=8C ``siginfo->si_arch`` =E4=BC=9A=E6=8C=87=E5=87=BA=E8=AF=95=E5=9B= =BE=E8=BF=9B=E8=A1=8C=E7=9A=84=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E3=80=82= =E7=A8=8B=E5=BA=8F=E8=AE=A1=E6=95=B0=E5=99=A8=E4=BC=9A=E5=92=8C=E5=8F=91=E7= =94=9F=E4=BA=86=E7=B3=BB=E7=BB=9F + =E8=B0=83=E7=94=A8=E7=9A=84=E4=B8=80=E6=A0=B7=EF=BC=88=E5=8D=B3=E5=AE=83= =E4=B8=8D=E4=BC=9A=E6=8C=87=E5=90=91=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E6= =8C=87=E4=BB=A4=EF=BC=89=E3=80=82=E8=BF=94=E5=9B=9E=E5=80=BC=E5=AF=84=E5=AD= =98=E5=99=A8=E4=BC=9A=E5=8C=85=E5=90=AB=E4=B8=80=E4=B8=AA=E4=B8=8E=E6=9E=B6= =E6=9E=84=E7=9B=B8=E5=85=B3=E7=9A=84=E5=80=BC=E2=80=94=E2=80=94 + =E5=A6=82=E6=9E=9C=E6=81=A2=E5=A4=8D=E6=89=A7=E8=A1=8C=EF=BC=8C=E9=9C=80= =E8=A6=81=E5=B0=86=E5=85=B6=E8=AE=BE=E4=B8=BA=E5=90=88=E7=90=86=E7=9A=84=E5= =80=BC=E3=80=82=EF=BC=88=E6=9E=B6=E6=9E=84=E4=BE=9D=E8=B5=96=E6=80=A7=E6=98= =AF=E5=9B=A0=E4=B8=BA=E5=B0=86=E5=85=B6=E6=9B=BF=E6=8D=A2=E4=B8=BA ``-ENOSY= S`` + =E4=BC=9A=E5=AF=BC=E8=87=B4=E4=B8=80=E4=BA=9B=E6=9C=89=E7=94=A8=E7=9A=84= =E4=BF=A1=E6=81=AF=E8=A2=AB=E8=A6=86=E7=9B=96=E3=80=82=EF=BC=89 + + =E8=BF=94=E5=9B=9E=E5=80=BC=E7=9A=84 ``SECCOMP_RET_DATA`` =E9=83=A8=E5=88= =86=E4=BC=9A=E4=BD=9C=E4=B8=BA ``si_errno`` =E4=BC=A0=E9=80=92=E3=80=82 + + =E7=94=B1seccomp=E8=A7=A6=E5=8F=91=E7=9A=84 ``SIGSYS`` =E4=BC=9A=E6=9C=89= =E4=B8=80=E4=B8=AA ``SYS_SECCOMP`` =E7=9A=84 si_code =E3=80=82 + +``SECCOMP_RET_ERRNO``: + =E4=BD=BF=E5=BE=97=E8=BF=94=E5=9B=9E=E5=80=BC=E7=9A=84=E4=BD=8E16=E4=BD= =8D=E4=BD=9C=E4=B8=BAerrno=E4=BC=A0=E9=80=92=E7=BB=99=E7=94=A8=E6=88=B7=E7= =A9=BA=E9=97=B4=EF=BC=8C=E8=80=8C=E4=B8=8D=E6=89=A7=E8=A1=8C=E7=B3=BB=E7=BB= =9F=E8=B0=83=E7=94=A8=E3=80=82 + +``SECCOMP_RET_USER_NOTIF``: + =E4=BD=BF=E5=BE=97=E4=B8=80=E4=B8=AA ``struct seccomp_notif`` =E6=B6=88= =E6=81=AF=E8=A2=AB=E5=8F=91=E9=80=81=E5=88=B0=E5=B7=B2=E9=99=84=E5=8A=A0=E7= =9A=84=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E9=80=9A=E7=9F=A5=E6=96=87=E4=BB= =B6=E6=8F=8F=E8=BF=B0 + =E7=AC=A6=E3=80=82=E5=A6=82=E6=9E=9C=E6=B2=A1=E6=9C=89=E8=A2=AB=E9=99=84= =E5=8A=A0=E5=88=99=E8=BF=94=E5=9B=9E ``-ENOSYS`` =E3=80=82=E4=B8=8B=E9=9D= =A2=E4=BC=9A=E8=AE=A8=E8=AE=BA=E5=A6=82=E4=BD=95=E5=A4=84=E7=90=86=E7=94=A8= =E6=88=B7=E9=80=9A=E7=9F=A5=E3=80=82 + +``SECCOMP_RET_TRACE``: + =E5=BD=93=E8=BF=94=E5=9B=9E=E7=9A=84=E6=97=B6=E5=80=99=EF=BC=8C=E8=BF=99= =E4=B8=AA=E5=80=BC=E4=BC=9A=E4=BD=BF=E5=BE=97=E5=86=85=E6=A0=B8=E5=9C=A8=E6= =89=A7=E8=A1=8C=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=89=8D=E5=B0=9D=E8=AF= =95=E5=8E=BB=E9=80=9A=E7=9F=A5=E4=B8=80=E4=B8=AA=E5=9F=BA=E4=BA=8E ``ptrace= ()`` + =E7=9A=84=E8=BF=BD=E8=B8=AA=E5=99=A8=E3=80=82=E5=A6=82=E6=9E=9C=E6=B2=A1= =E6=9C=89=E8=BF=BD=E8=B8=AA=E5=99=A8=EF=BC=8C ``-ENOSYS`` =E4=BC=9A=E8=BF= =94=E5=9B=9E=E7=BB=99=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=EF=BC=8C=E5=B9=B6= =E4=B8=94=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E4=B8=8D=E4=BC=9A=E6=89=A7=E8= =A1=8C=E3=80=82 + + =E5=A6=82=E6=9E=9C=E8=BF=BD=E8=B8=AA=E5=99=A8=E9=80=9A=E8=BF=87 ``ptrace(= PTRACE_SETOPTIONS)`` =E8=AF=B7=E6=B1=82=E4=BA=86 ``PTRACE_O_TRACESECCOMP``= =EF=BC=8C + =E9=82=A3=E4=B9=88=E5=AE=83=E4=BC=9A=E6=94=B6=E5=88=B0 ``PTRACE_EVENT_SEC= COMP`` =E9=80=9A=E7=9F=A5=E3=80=82BPF=E7=A8=8B=E5=BA=8F=E8=BF=94=E5=9B=9E= =E5=80=BC=E7=9A=84 ``SECCOMP_RET_DATA`` + =E9=83=A8=E5=88=86=E4=BC=9A=E9=80=9A=E8=BF=87 ``PTRACE_GETEVENTMSG`` =E6= =8F=90=E4=BE=9B=E7=BB=99=E8=BF=BD=E8=B8=AA=E5=99=A8=E3=80=82 + + =E8=BF=BD=E8=B8=AA=E5=99=A8=E5=8F=AF=E4=BB=A5=E9=80=9A=E8=BF=87=E6=94=B9= =E5=8F=98=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=8F=B7=E5=88=B0-1=E6=9D=A5= =E8=B7=B3=E8=BF=87=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E3=80=82=E6=88=96=E8= =80=85=E8=BF=BD=E8=B8=AA=E5=99=A8=E5=8F=AF=E4=BB=A5=E6=94=B9=E5=8F=98=E7=B3= =BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=8F=B7=E5=88=B0 + =E4=B8=80=E4=B8=AA=E6=9C=89=E6=95=88=E5=80=BC=E6=9D=A5=E6=94=B9=E5=8F=98= =E8=AF=B7=E6=B1=82=E7=9A=84=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E3=80=82=E5= =A6=82=E6=9E=9C=E8=BF=BD=E8=B8=AA=E5=99=A8=E8=AF=B7=E6=B1=82=E8=B7=B3=E8=BF= =87=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=EF=BC=8C=E9=82=A3=E4=B9=88=E7=B3=BB= =E7=BB=9F=E8=B0=83=E7=94=A8=E5=B0=86=E8=BF=94=E5=9B=9E + =E8=BF=BD=E8=B8=AA=E5=99=A8=E6=94=BE=E5=9C=A8=E8=BF=94=E5=9B=9E=E5=80=BC= =E5=AF=84=E5=AD=98=E5=99=A8=E4=B8=AD=E7=9A=84=E5=80=BC=E3=80=82 + + =E5=9C=A8=E8=BF=BD=E8=B8=AA=E5=99=A8=E8=A2=AB=E9=80=9A=E7=9F=A5=E5=90=8E= =EF=BC=8Cseccomp=E6=A3=80=E6=9F=A5=E4=B8=8D=E4=BC=9A=E5=86=8D=E6=AC=A1=E8= =BF=90=E8=A1=8C=E3=80=82=EF=BC=88=E8=BF=99=E6=84=8F=E5=91=B3=E7=9D=80=E5=9F= =BA=E4=BA=8Eseccomp=E7=9A=84=E6=B2=99=E7=AE=B1=E5=BF=85=E9=A1=BB=E7=A6=81= =E6=AD=A2 + ptrace=E7=9A=84=E4=BD=BF=E7=94=A8=EF=BC=8C=E7=94=9A=E8=87=B3=E5=85=B6=E4= =BB=96=E6=B2=99=E7=AE=B1=E8=BF=9B=E7=A8=8B=E4=B9=9F=E4=B8=8D=E8=A1=8C=EF=BC= =8C=E9=99=A4=E9=9D=9E=E9=9D=9E=E5=B8=B8=E5=B0=8F=E5=BF=83=EF=BC=9Bptrace=E5= =8F=AF=E4=BB=A5=E9=80=9A=E8=BF=87=E8=BF=99=E4=B8=AA=E6=9C=BA=E5=88=B6=E6=9D= =A5=E9=80=83 + =E9=80=B8=E3=80=82=EF=BC=89 + +``SECCOMP_RET_LOG``: + =E4=BD=BF=E5=BE=97=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=9C=A8=E8=A2=AB= =E8=AE=B0=E5=BD=95=E4=B9=8B=E5=90=8E=E5=86=8D=E8=BF=90=E8=A1=8C=E3=80=82=E8= =BF=99=E5=BA=94=E8=AF=A5=E8=A2=AB=E5=BA=94=E7=94=A8=E5=BC=80=E5=8F=91=E8=80= =85=E7=94=A8=E6=9D=A5=E6=A3=80=E6=9F=A5=E4=BB=96=E4=BB=AC=E7=9A=84=E7=A8=8B= =E5=BA=8F=E9=9C=80=E8=A6=81=E5=93=AA=E4=BA=9B + =E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=EF=BC=8C=E8=80=8C=E4=B8=8D=E9=9C=80= =E8=A6=81=E5=8F=8D=E5=A4=8D=E9=80=9A=E8=BF=87=E5=A4=9A=E4=B8=AA=E6=B5=8B=E8= =AF=95=E5=92=8C=E5=BC=80=E5=8F=91=E5=91=A8=E6=9C=9F=E6=9D=A5=E5=BB=BA=E7=AB= =8B=E6=B8=85=E5=8D=95=E3=80=82 + + =E5=8F=AA=E6=9C=89=E5=9C=A8 actions_logged sysctl =E5=AD=97=E7=AC=A6=E4= =B8=B2=E4=B8=AD=E5=87=BA=E7=8E=B0 "log" =E6=97=B6=EF=BC=8C=E8=BF=99=E4=B8= =AA=E6=93=8D=E4=BD=9C=E6=89=8D=E4=BC=9A=E8=A2=AB=E8=AE=B0=E5=BD=95=E3=80=82 + +``SECCOMP_RET_ALLOW``: + =E4=BD=BF=E5=BE=97=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E8=A2=AB=E6=89=A7= =E8=A1=8C=E3=80=82 + +=E5=A6=82=E6=9E=9C=E5=A4=9A=E4=B8=AA=E8=BF=BD=E8=B8=AA=E5=99=A8=E5=AD=98= =E5=9C=A8=EF=BC=8C=E8=AF=84=E4=BC=B0=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E7= =9A=84=E8=BF=94=E5=9B=9E=E5=80=BC=E5=B0=86=E6=B0=B8=E8=BF=9C=E4=BD=BF=E7=94= =A8=E6=9C=80=E9=AB=98=E4=BC=98=E5=85=88=E7=BA=A7=E7=9A=84=E5=80=BC=E3=80=82 + +=E4=BC=98=E5=85=88=E7=BA=A7=E5=8F=AA=E9=80=9A=E8=BF=87 ``SECCOMP_RET_ACTIO= N`` =E6=8E=A9=E7=A0=81=E6=9D=A5=E5=86=B3=E5=AE=9A=E3=80=82=E5=BD=93=E5=A4= =9A=E4=B8=AA=E8=BF=87=E6=BB=A4=E5=99=A8=E8=BF=94=E5=9B=9E=E7=9B=B8=E5=90=8C= =E4=BC=98=E5=85=88=E7=BA=A7=E7=9A=84=E8=BF=94=E5=9B=9E +=E5=80=BC=E6=97=B6=EF=BC=8C=E5=8F=AA=E6=9C=89=E6=9D=A5=E8=87=AA=E6=9C=80= =E8=BF=91=E5=AE=89=E8=A3=85=E7=9A=84=E8=BF=87=E6=BB=A4=E5=99=A8=E7=9A=84 ``= SECCOMP_RET_DATA`` =E4=BC=9A=E8=A2=AB=E8=BF=94=E5=9B=9E=E3=80=82 + +=E9=9A=90=E6=82=A3 +=3D=3D=3D=3D + +=E6=9C=80=E9=9C=80=E8=A6=81=E9=81=BF=E5=85=8D=E7=9A=84=E9=9A=90=E6=82=A3= =E6=98=AF=E5=9C=A8=E8=BF=87=E6=BB=A4=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5= =8F=B7=E6=97=B6=E5=8D=B4=E4=B8=8D=E6=A3=80=E6=9F=A5=E6=9E=B6=E6=9E=84=E5=80= =BC=E3=80=82=E4=B8=BA=E4=BB=80=E4=B9=88=EF=BC=9F=E5=9C=A8=E4=BB=BB=E4=BD=95= =E6=94=AF=E6=8C=81=E5=A4=9A=E4=B8=AA=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8 +=E7=BA=A6=E5=AE=9A=E7=9A=84=E6=9E=B6=E6=9E=84=E4=B8=8A=EF=BC=8C=E7=B3=BB= =E7=BB=9F=E8=B0=83=E7=94=A8=E5=8F=B7=E5=8F=AF=E8=83=BD=E6=A0=B9=E6=8D=AE=E5= =85=B7=E4=BD=93=E8=B0=83=E7=94=A8=E8=80=8C=E4=B8=8D=E5=90=8C=E3=80=82=E5=A6= =82=E6=9E=9C=E4=B8=8D=E5=90=8C=E8=B0=83=E7=94=A8=E7=BA=A6=E5=AE=9A=E4=B8=AD= =E7=9A=84=E8=B0=83=E7=94=A8=E5=8F=B7=E6=9C=89=E9=87=8D=E5=8F=A0=EF=BC=8C +=E9=82=A3=E4=B9=88=E8=BF=87=E6=BB=A4=E5=99=A8=E7=9A=84=E6=A3=80=E6=9F=A5= =E5=8F=AF=E8=83=BD=E8=A2=AB=E6=BB=A5=E7=94=A8=E3=80=82=E8=AF=B7=E6=80=BB=E6= =98=AF=E6=A3=80=E6=9F=A5=E6=9E=B6=E6=9E=84=E5=80=BC=EF=BC=81 + +=E4=BE=8B=E5=AD=90 +=3D=3D=3D=3D + +``samples/seccomp/`` =E6=96=87=E4=BB=B6=E5=A4=B9=E5=8C=85=E5=90=AB=E4=BA= =86x86=E4=B8=93=E7=94=A8=E5=92=8C=E6=9B=B4=E9=80=9A=E7=94=A8=E7=9A=84=E4=BD= =BF=E7=94=A8=E9=AB=98=E5=B1=82=E5=AE=8F=E6=8E=A5=E5=8F=A3=E6=9D=A5=E7=94=9F= =E6=88=90BPF=E7=A8=8B=E5=BA=8F=E7=9A=84 +=E4=BE=8B=E5=AD=90=E3=80=82 + +=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E9=80=9A=E7=9F=A5 +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D + +``SECCOMP_RET_USER_NOTIF`` =E8=BF=94=E5=9B=9E=E5=80=BC=E4=BC=9A=E8=AE=A9se= ccomp=E8=BF=87=E6=BB=A4=E5=99=A8=E4=BC=A0=E9=80=92=E4=B8=80=E4=B8=AA=E7=89= =B9=E5=AE=9A=E7=9A=84=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E7=BB=99=E7=94=A8= =E6=88=B7 +=E7=A9=BA=E9=97=B4=E5=A4=84=E7=90=86=E3=80=82=E8=BF=99=E5=8F=AF=E8=83=BD= =E4=BC=9A=E5=AF=B9=E5=83=8F=E5=AE=B9=E5=99=A8=E7=AE=A1=E7=90=86=E5=99=A8=E7= =9A=84=E7=A8=8B=E5=BA=8F=E6=9C=89=E7=94=A8=EF=BC=8C=E5=AE=83=E4=BB=AC=E5=B8= =8C=E6=9C=9B=E6=8B=A6=E6=88=AA=E7=89=B9=E5=AE=9A=E7=9A=84=E7=B3=BB=E7=BB=9F= =E8=B0=83=E7=94=A8=EF=BC=88=E5=A6=82 ``mount()``=EF=BC=8C +``finit_module()`` =E7=AD=89=E7=AD=89=EF=BC=89=E5=B9=B6=E6=94=B9=E5=8F=98= =E5=85=B6=E8=A1=8C=E4=B8=BA=E3=80=82 + +=E4=BC=A0=E9=80=92 ``SECCOMP_FILTER_FLAG_NEW_LISTENER`` =E5=8F=82=E6=95=B0= =E7=BB=99 ``seccomp()`` =E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=8F=AF=E4=BB= =A5=E5=8F=96 +=E5=BE=97=E9=80=9A=E7=9F=A5=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6= =EF=BC=9A + +.. code-block:: c + + fd =3D seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_NEW_LISTEN= ER, &prog); + +=E6=88=90=E5=8A=9F=E6=83=85=E5=86=B5=E4=B8=8B=E4=BC=9A=E8=BF=94=E5=9B=9E= =E4=B8=80=E4=B8=AA=E5=AF=B9=E8=BF=87=E6=BB=A4=E5=99=A8=E7=9B=91=E5=90=AC=E7= =9A=84=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=EF=BC=8C=E7=84=B6=E5=90= =8E=E5=8F=AF=E4=BB=A5=E9=80=9A=E8=BF=87 ``SCM_RIGHTS`` =E6=88=96=E7=B1=BB= =E4=BC=BC +=E7=9A=84=E6=96=B9=E5=BC=8F=E4=BC=A0=E9=80=92=E3=80=82=E9=9C=80=E8=A6=81= =E6=B3=A8=E6=84=8F=E7=9A=84=E6=98=AF=EF=BC=8C=E8=BF=87=E6=BB=A4=E5=99=A8=E6= =96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=E9=92=88=E5=AF=B9=E7=9A=84=E6=98= =AF=E4=B8=80=E4=B8=AA=E7=89=B9=E5=AE=9A=E7=9A=84=E8=BF=87=E6=BB=A4=E5=99=A8= =E8=80=8C=E4=B8=8D=E6=98=AF=E7=89=B9=E5=AE=9A=E7=9A=84=E4=BB=BB=E5=8A=A1=E3= =80=82 +=E6=89=80=E4=BB=A5=E5=A6=82=E6=9E=9C=E8=BF=99=E4=B8=AA=E4=BB=BB=E5=8A=A1= =E5=90=8E=E6=9D=A5fork=E4=BA=86=EF=BC=8C=E6=9D=A5=E8=87=AA=E4=B8=A4=E4=B8= =AA=E4=BB=BB=E5=8A=A1=E7=9A=84=E9=80=9A=E7=9F=A5=E9=83=BD=E4=BC=9A=E5=87=BA= =E7=8E=B0=E5=9C=A8=E5=90=8C=E4=B8=80=E4=B8=AA=E8=BF=87=E6=BB=A4=E5=99=A8=E6= =96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=E4=B8=AD=E3=80=82 +=E5=AF=B9=E4=BA=8E=E8=BF=87=E6=BB=A4=E5=99=A8=E6=96=87=E4=BB=B6=E6=8F=8F= =E8=BF=B0=E7=AC=A6=E7=9A=84=E8=AF=BB=E5=86=99=E4=B9=9F=E6=98=AF=E5=90=8C=E6= =AD=A5=E7=9A=84=EF=BC=8C=E6=89=80=E4=BB=A5=E4=B8=80=E4=B8=AA=E8=BF=87=E6=BB= =A4=E5=99=A8=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=E5=8F=AF=E4=BB=A5= =E5=AE=89=E5=85=A8=E5=9C=B0=E6=8B=A5=E6=9C=89=E5=A4=9A=E4=B8=AA=E8=AF=BB=E8= =80=85=E3=80=82 + +seccomp=E9=80=9A=E7=9F=A5=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=E7= =94=B1=E4=B8=A4=E4=B8=AA=E7=BB=93=E6=9E=84=E4=BD=93=E7=BB=84=E6=88=90=EF=BC= =9A + +.. code-block:: c + + struct seccomp_notif_sizes { + __u16 seccomp_notif; + __u16 seccomp_notif_resp; + __u16 seccomp_data; + }; + + struct seccomp_notif { + __u64 id; + __u32 pid; + __u32 flags; + struct seccomp_data data; + }; + + struct seccomp_notif_resp { + __u64 id; + __s64 val; + __s32 error; + __u32 flags; + }; + +``struct seccomp_notif_sizes`` =E7=BB=93=E6=9E=84=E4=BD=93=E5=8F=AF=E4=BB= =A5=E7=94=A8=E4=BA=8E=E7=A1=AE=E5=AE=9Aseccomp=E9=80=9A=E7=9F=A5=E4=B8=AD= =E5=90=84=E7=A7=8D=E7=BB=93=E6=9E=84=E4=BD=93=E7=9A=84=E5=A4=A7=E5=B0=8F=E3= =80=82 +``struct seccomp_data`` =E7=9A=84=E5=A4=A7=E5=B0=8F=E5=8F=AF=E8=83=BD=E6= =9C=AA=E6=9D=A5=E4=BC=9A=E6=94=B9=E5=8F=98=EF=BC=8C=E6=89=80=E4=BB=A5=E9=9C= =80=E8=A6=81=E4=BD=BF=E7=94=A8=E4=B8=8B=E9=9D=A2=E7=9A=84=E4=BB=A3=E7=A0=81= =EF=BC=9A + +.. code-block:: c + + struct seccomp_notif_sizes sizes; + seccomp(SECCOMP_GET_NOTIF_SIZES, 0, &sizes); + +=E6=9D=A5=E5=86=B3=E5=AE=9A=E9=9C=80=E8=A6=81=E5=88=86=E9=85=8D=E7=9A=84= =E5=A4=9A=E7=A7=8D=E7=BB=93=E6=9E=84=E4=BD=93=E7=9A=84=E5=A4=A7=E5=B0=8F=E3= =80=82=E8=AF=B7=E6=9F=A5=E7=9C=8B samples/seccomp/user-trap.c =E4=B8=AD=E7= =9A=84=E4=BE=8B=E5=AD=90=E3=80=82 + +=E7=94=A8=E6=88=B7=E5=8F=AF=E4=BB=A5=E9=80=9A=E8=BF=87 ``ioctl(SECCOMP_IOC= TL_NOTIF_RECV)`` (=E6=88=96 ``poll()``) =E8=AF=BB=E5=8F=96seccomp +=E9=80=9A=E7=9F=A5=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=E6=9D=A5= =E6=8E=A5=E6=94=B6=E4=B8=80=E4=B8=AA ``struct seccomp_notif`` =EF=BC=8C=E5= =85=B6=E4=B8=AD=E5=8C=85=E5=90=AB=E4=BA=94=E4=B8=AA=E6=88=90=E5=91=98=EF=BC= =9A=E7=BB=93=E6=9E=84=E4=BD=93=E7=9A=84 +=E8=BE=93=E5=85=A5=E9=95=BF=E5=BA=A6=EF=BC=8C=E6=AF=8F=E4=B8=AA=E8=BF=87= =E6=BB=A4=E5=99=A8=E5=94=AF=E4=B8=80=E7=9A=84 ``id`` =EF=BC=8C =E8=A7=A6=E5= =8F=91=E8=AF=B7=E6=B1=82=E4=BB=BB=E5=8A=A1=E7=9A=84 ``pid`` =EF=BC=88=E5=A6= =82=E6=9E=9C=E4=BB=BB=E5=8A=A1=E7=9A=84pid=E5=91=BD=E5=90=8D=E7=A9=BA +=E9=97=B4=E5=AF=B9=E4=BA=8E=E7=9B=91=E5=90=AC=E8=80=85=E7=9A=84pid=E5=91= =BD=E5=90=8D=E7=A9=BA=E9=97=B4=E4=B8=8D=E5=8F=AF=E8=A7=81=E7=9A=84=E8=AF=9D= =EF=BC=8C=E5=8F=AF=E8=83=BD=E4=B8=BA0=EF=BC=89=E3=80=82=E9=80=9A=E7=9F=A5= =E8=BF=98=E5=8C=85=E5=90=AB=E4=BC=A0=E9=80=92=E7=BB=99seccomp=E7=9A=84 ``da= ta`` +=E5=92=8C=E4=B8=80=E4=B8=AA=E8=BF=87=E6=BB=A4=E5=99=A8=E6=A0=87=E5=BF=97= =E3=80=82=E5=9C=A8=E8=B0=83=E7=94=A8ioctl=E5=89=8D=E7=BB=93=E6=9E=84=E4=BD= =93=E5=BA=94=E8=AF=A5=E8=A2=AB=E6=B8=85=E7=A9=BA=E3=80=82 + +=E4=B9=8B=E5=90=8E=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E5=8F=AF=E4=BB=A5= =E6=A0=B9=E6=8D=AE=E8=BF=99=E4=BA=9B=E4=BF=A1=E6=81=AF=E5=86=B3=E5=AE=9A=E5= =81=9A=E4=BB=80=E4=B9=88=EF=BC=8C=E5=B9=B6=E9=80=9A=E8=BF=87 ``ioctl(SECCOM= P_IOCTL_NOTIF_SEND)`` +=E5=8F=91=E9=80=81=E4=B8=80=E4=B8=AA=E5=93=8D=E5=BA=94=EF=BC=8C=E8=A1=A8= =E7=A4=BA=E5=BA=94=E8=AF=A5=E7=BB=99=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E8= =BF=94=E5=9B=9E=E4=BB=80=E4=B9=88=E3=80=82 ``struct seccomp_notif_resp`` = =E7=9A=84 ``id`` +=E6=88=90=E5=91=98=E5=BA=94=E8=AF=A5=E5=92=8C ``struct seccomp_notif`` =E7= =9A=84 ``id`` =E4=B8=80=E8=87=B4=E3=80=82 + +=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E4=B9=9F=E5=8F=AF=E4=BB=A5=E9=80=9A= =E8=BF=87 ``ioctl(SECCOMP_IOCTL_NOTIF_ADDFD)`` =E5=90=91=E9=80=9A=E7=9F=A5= =E8=BF=9B=E7=A8=8B=E6=B7=BB=E5=8A=A0=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0 +=E7=AC=A6=E3=80=82 ``struct seccomp_notif_addfd`` =E7=9A=84 ``id`` =E6=88= =90=E5=91=98=E5=BA=94=E8=AF=A5=E5=92=8C ``struct seccomp_notif`` +=E7=9A=84 ``id`` =E4=BF=9D=E6=8C=81=E4=B8=80=E8=87=B4=E3=80=82 ``newfd_fla= gs`` =E6=A0=87=E5=BF=97=E5=8F=AF=E4=BB=A5=E8=A2=AB=E7=94=A8=E4=BA=8E=E5=9C= =A8=E9=80=9A=E7=9F=A5=E8=BF=9B=E7=A8=8B=E7=9A=84=E6=96=87=E4=BB=B6=E6=8F=8F= =E8=BF=B0=E7=AC=A6=E4=B8=8A=E8=AE=BE=E7=BD=AE +O_CLOEXEC =E7=AD=89=E6=A0=87=E5=BF=97=E3=80=82=E5=A6=82=E6=9E=9C=E7=9B=91= =E7=9D=A3=E8=80=85=EF=BC=88supervisor=EF=BC=89=E5=90=91=E6=96=87=E4=BB=B6= =E6=8F=8F=E8=BF=B0=E7=AC=A6=E6=B3=A8=E5=85=A5=E4=B8=80=E4=B8=AA=E7=89=B9=E5= =AE=9A=E7=9A=84=E6=95=B0=E5=AD=97=EF=BC=8C=E5=8F=AF=E4=BB=A5=E4=BD=BF=E7=94= =A8 +``SECCOMP_ADDFD_FLAG_SETFD`` =E6=A0=87=E5=BF=97=EF=BC=8C=E5=B9=B6=E8=AE=BE= =E7=BD=AE ``newfd`` =E6=88=90=E5=91=98=E4=B8=BA=E8=A6=81=E4=BD=BF=E7=94=A8= =E7=9A=84=E7=89=B9=E5=AE=9A=E6=95=B0=E5=AD=97=E3=80=82 +=E5=A6=82=E6=9E=9C=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=E5=B7=B2= =E7=BB=8F=E5=9C=A8=E9=80=9A=E7=9F=A5=E8=BF=9B=E7=A8=8B=E4=B8=AD=E6=89=93=E5= =BC=80=EF=BC=8C=E9=82=A3=E5=AE=83=E5=B0=86=E8=A2=AB=E6=9B=BF=E6=8D=A2=E3=80= =82=E7=9B=91=E7=9D=A3=E8=80=85=E4=B9=9F=E5=8F=AF=E4=BB=A5=E6=B7=BB=E5=8A=A0= =E4=B8=80=E4=B8=AA=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF=B0=E7=AC=A6=EF=BC=8C +=E5=B9=B6=E4=BD=BF=E7=94=A8 ``SECCOMP_ADDFD_FLAG_SEND`` =E6=A0=87=E5=BF=97= =E5=8E=9F=E5=AD=90=E5=93=8D=E5=BA=94=EF=BC=8C=E8=BF=94=E5=9B=9E=E5=80=BC=E5= =B0=86=E6=98=AF=E6=B3=A8=E5=85=A5=E7=9A=84=E6=96=87=E4=BB=B6=E6=8F=8F=E8=BF= =B0=E7=AC=A6=E7=BC=96=E5=8F=B7=E3=80=82 + +=E9=80=9A=E7=9F=A5=E8=BF=9B=E7=A8=8B=E5=8F=AF=E4=BB=A5=E8=A2=AB=E6=8A=A2= =E5=8D=A0=EF=BC=8C=E5=AF=BC=E8=87=B4=E9=80=9A=E7=9F=A5=E8=A2=AB=E7=BB=88=E6= =AD=A2=E3=80=82=E8=BF=99=E5=8F=AF=E8=83=BD=E5=9C=A8=E5=B0=9D=E8=AF=95=E4=BB= =A3=E8=A1=A8=E9=80=9A=E7=9F=A5=E8=BF=9B=E7=A8=8B=E6=89=A7=E8=A1=8C=E9=95=BF= =E6=97=B6=E9=97=B4=E4=B8=94=E9=80=9A=E5=B8=B8=E5=8F=AF=E9=87=8D=E8=AF=95 +=EF=BC=88=E5=A6=82=E6=8C=82=E8=BD=BD=E6=96=87=E4=BB=B6=E7=B3=BB=E7=BB=9F= =EF=BC=89=E7=9A=84=E6=93=8D=E4=BD=9C=E6=97=B6=E5=AF=BC=E8=87=B4=E9=97=AE=E9= =A2=98=E3=80=82=E5=8F=A6=E5=A4=96=EF=BC=8C=E5=9C=A8=E5=AE=89=E8=A3=85=E8=BF= =87=E6=BB=A4=E5=99=A8=E7=9A=84=E6=97=B6=E5=80=99=EF=BC=8C +``SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV`` =E5=8F=AF=E4=BB=A5=E8=A2=AB=E8= =AE=BE=E7=BD=AE=E3=80=82=E8=BF=99=E4=B8=AA=E6=A0=87=E5=BF=97=E4=BD=BF=E5=BE= =97=E5=BD=93=E7=9B=91=E7=9D=A3=E8=80=85=E6=94=B6=E5=88=B0=E7=94=A8 +=E6=88=B7=E9=80=9A=E7=9F=A5=E6=97=B6=EF=BC=8C=E9=80=9A=E7=9F=A5=E8=BF=9B= =E7=A8=8B=E4=BC=9A=E5=BF=BD=E7=95=A5=E9=9D=9E=E8=87=B4=E5=91=BD=E4=BF=A1=E5= =8F=B7=EF=BC=8C=E7=9B=B4=E5=88=B0=E5=93=8D=E5=BA=94=E8=A2=AB=E5=8F=91=E9=80= =81=E3=80=82=E5=9C=A8=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97=B4=E6=94=B6=E5=88=B0= =E9=80=9A=E7=9F=A5=E4=B9=8B=E5=89=8D=E5=8F=91=E5=87=BA=E7=9A=84=E4=BF=A1=E5= =8F=B7 +=E5=B0=86=E8=A2=AB=E6=AD=A3=E5=B8=B8=E5=A4=84=E7=90=86=E3=80=82 + +=E5=80=BC=E5=BE=97=E6=B3=A8=E6=84=8F=E7=9A=84=E6=98=AF=EF=BC=8C ``struct s= eccomp_data`` =E5=8C=85=E5=90=AB=E4=BA=86=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94= =A8=E5=AF=84=E5=AD=98=E5=99=A8=E5=8F=82=E6=95=B0=E7=9A=84=E5=80=BC=EF=BC=8C= =E4=BD=86=E6=98=AF=E4=B8=8D=E5=8C=85=E5=90=AB=E6=8C=87=E5=90=91 +=E5=86=85=E5=AD=98=E7=9A=84=E6=8C=87=E9=92=88=E3=80=82=E4=BB=BB=E5=8A=A1= =E7=9A=84=E5=86=85=E5=AD=98=E5=8F=AF=E4=BB=A5=E9=80=9A=E8=BF=87 ``ptrace()= `` =E6=88=96 ``/proc/pid/mem`` =E7=94=B1=E5=90=88=E9=80=82=E7=9A=84=E7=89= =B9=E6=9D=83=E8=B7=9F=E8=B8=AA +=E8=AE=BF=E9=97=AE=E3=80=82=E4=BD=86=E6=98=AF=EF=BC=8C=E9=9C=80=E8=A6=81= =E6=B3=A8=E6=84=8F=E9=81=BF=E5=85=8D=E4=B9=8B=E5=89=8D=E6=8F=90=E5=88=B0=E7= =9A=84TOCTOU=E6=94=BB=E5=87=BB=EF=BC=9A=E6=89=80=E6=9C=89=E4=BB=8E=E8=A2=AB= =E8=B7=9F=E8=B8=AA=E8=80=85=E5=86=85=E5=AD=98=E4=B8=AD=E8=AF=BB=E5=88=B0=E7= =9A=84=E5=8F=82=E6=95=B0=E9=83=BD=E5=BA=94=E8=AF=A5=E5=85=88 +=E8=AF=BB=E5=88=B0=E8=BF=BD=E8=B8=AA=E5=99=A8=E7=9A=84=E5=86=85=E5=AD=98= =E4=B8=AD=EF=BC=8C=E5=86=8D=E5=81=9A=E5=87=BA=E7=AD=96=E7=95=A5=E5=86=B3=E5= =AE=9A=E3=80=82=E8=BF=99=E6=A0=B7=E5=B0=B1=E5=8F=AF=E4=BB=A5=E5=AF=B9=E7=B3= =BB=E7=BB=9F=E8=B0=83=E7=94=A8=E7=9A=84=E5=8F=82=E6=95=B0=E5=81=9A=E5=8E=9F= =E5=AD=90=E5=86=B3=E5=AE=9A=E3=80=82 + +Sysctls +=3D=3D=3D=3D=3D=3D=3D + +Seccomp=E7=9A=84sysctl=E6=96=87=E4=BB=B6=E5=8F=AF=E4=BB=A5=E5=9C=A8 ``/pro= c/sys/kernel/seccomp/`` =E6=96=87=E4=BB=B6=E5=A4=B9=E4=B8=AD=E6=89=BE=E5=88= =B0=E3=80=82=E8=BF=99=E9=87=8C=E6=9C=89=E5=AF=B9=E6=96=87=E4=BB=B6 +=E5=A4=B9=E4=B8=AD=E6=AF=8F=E4=B8=AA=E6=96=87=E4=BB=B6=E7=9A=84=E6=8F=8F= =E8=BF=B0=EF=BC=9A + +``actions_avail``: + =E4=BB=A5=E5=AD=97=E7=AC=A6=E4=B8=B2=E5=BD=A2=E5=BC=8F=E4=BF=9D=E5=AD=98s= eccomp=E8=BF=94=E5=9B=9E=E5=80=BC=EF=BC=88=E5=8F=82=E8=80=83=E4=B8=8A=E6=96= =87=E7=9A=84 ``SECCOMP_RET_*`` =E5=AE=8F=EF=BC=89=E7=9A=84=E5=8F=AA=E8=AF= =BB=E6=9C=89=E5=BA=8F + =E5=88=97=E8=A1=A8=E3=80=82=E4=BB=8E=E5=B7=A6=E5=BE=80=E5=8F=B3=E6=8C=89= =E7=85=A7=E6=9C=80=E5=B0=91=E8=AE=B8=E5=8F=AF=E8=BF=94=E5=9B=9E=E5=80=BC=E5= =88=B0=E6=9C=80=E5=A4=9A=E8=AE=B8=E5=8F=AF=E8=BF=94=E5=9B=9E=E5=80=BC=E6=8E= =92=E5=BA=8F=E3=80=82 + + =E8=BF=99=E4=B8=AA=E5=88=97=E8=A1=A8=E4=BB=A3=E8=A1=A8=E4=BA=86=E5=86=85= =E6=A0=B8=E6=94=AF=E6=8C=81=E7=9A=84seccomp=E8=BF=94=E5=9B=9E=E5=80=BC=E9= =9B=86=E5=90=88=E3=80=82=E4=B8=80=E4=B8=AA=E7=94=A8=E6=88=B7=E7=A9=BA=E9=97= =B4=E7=A8=8B=E5=BA=8F=E5=8F=AF=E4=BB=A5=E4=BD=BF=E7=94=A8=E8=BF=99=E4=B8=AA= =E5=88=97=E8=A1=A8=E6=9D=A5=E5=9C=A8 + =E7=A8=8B=E5=BA=8F=E5=BB=BA=E7=AB=8B=E6=97=B6=E7=A1=AE=E5=AE=9A=E5=9C=A8 = ``seccomp.h`` =E4=B8=AD=E6=89=BE=E5=88=B0=E7=9A=84=E5=8A=A8=E4=BD=9C=E6=98= =AF=E5=90=A6=E5=92=8C=E5=BD=93=E5=89=8D=E8=BF=90=E8=A1=8C=E5=86=85=E6=A0=B8= =E5=AE=9E=E9=99=85=E6=94=AF=E6=8C=81=E7=9A=84=E5=8A=A8=E4=BD=9C=E6=9C=89=E6= =89=80 + =E4=B8=8D=E5=90=8C=E3=80=82 + +``actions_logged``: + =E5=85=81=E8=AE=B8=E8=A2=AB=E8=AE=B0=E5=BD=95=E7=9A=84seccomp=E4=BF=9D=E5= =AD=98=E5=80=BC=EF=BC=88=E5=8F=82=E8=80=83=E4=B8=8A=E6=96=87=E7=9A=84 ``SEC= COMP_RET_*`` =E5=AE=8F=EF=BC=89=E7=9A=84=E5=8F=AF=E8=AF=BB=E5=86=99=E6=9C= =89=E5=BA=8F=E5=88=97=E8=A1=A8=E3=80=82 + =E5=AF=B9=E6=96=87=E4=BB=B6=E5=86=99=E5=85=A5=E4=B8=8D=E9=9C=80=E8=A6=81= =E6=98=AF=E6=9C=89=E5=BA=8F=E7=9A=84=EF=BC=8C=E4=BD=86=E4=BB=8E=E6=96=87=E4= =BB=B6=E8=AF=BB=E5=8F=96=E5=B0=86=E4=B8=8Eactions_avail sysctl=E4=B8=80=E8= =87=B4=E7=9A=84=E6=96=B9=E5=BC=8F=E6=8E=92=E5=BA=8F=E3=80=82 + + ``allow`` =E5=AD=97=E7=AC=A6=E4=B8=B2=E5=9C=A8 ``actions_logged`` sysctl= =E4=B8=AD=E4=B8=8D=E8=A2=AB=E6=8E=A5=E6=94=B6=EF=BC=8C=E5=9B=A0=E4=B8=BA=E4= =B8=8D=E5=8F=AF=E8=83=BD=E8=AE=B0=E5=BD=95 + ``SECCOMP_RET_ALLOW`` =E5=8A=A8=E4=BD=9C=E3=80=82=E5=B0=9D=E8=AF=95=E5=90= =91sysctl=E5=86=99=E5=85=A5 ``allow`` =E4=BC=9A=E5=AF=BC=E8=87=B4=E8=BF=94= =E5=9B=9E=E4=B8=80=E4=B8=AAEINVAL=E3=80=82 + +=E6=B7=BB=E5=8A=A0=E6=9E=B6=E6=9E=84=E6=94=AF=E6=8C=81 +=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D + +=E8=AF=B7=E6=9F=A5=E7=9C=8B ``arch/Kconfig`` =E4=BA=86=E8=A7=A3=E6=9D=83= =E5=A8=81=E8=A6=81=E6=B1=82=E3=80=82=E6=80=BB=E7=9A=84=E6=9D=A5=E8=AF=B4=E5= =A6=82=E6=9E=9C=E4=B8=80=E4=B8=AA=E6=9E=B6=E6=9E=84=E5=90=8C=E6=97=B6=E6=94= =AF=E6=8C=81ptrace_event=E5=92=8C +seccomp=EF=BC=8C=E9=82=A3=E4=B9=88=E5=AE=83=E5=B0=86=E5=8F=AF=E4=BB=A5=E9= =80=9A=E8=BF=87=E8=BE=83=E5=B0=8F=E7=9A=84=E4=BF=AE=E6=94=B9=E6=94=AF=E6=8C= =81seccomp=E8=BF=87=E6=BB=A4=E5=99=A8=EF=BC=9A ``SIGSYS`` =E6=94=AF=E6=8C= =81=E5=92=8Cseccomp +=E8=BF=94=E5=9B=9E=E5=80=BC=E6=A3=80=E6=9F=A5=E3=80=82=E7=84=B6=E5=90=8E= =E5=BF=85=E9=A1=BB=E5=B0=86 ``CONFIG_HAVE_ARCH_SECCOMP_FILTER`` =E6=B7=BB= =E5=8A=A0=E5=88=B0=E5=AE=83=E7=9A=84=E6=9E=B6=E6=9E=84=E7=89=B9=E5=AE=9A +=E7=9A=84Kconfig=E4=B8=AD=E3=80=82 + +=E6=B3=A8=E6=84=8F=E4=BA=8B=E9=A1=B9 +=3D=3D=3D=3D=3D=3D=3D=3D + +vDSO=E5=8F=AF=E8=83=BD=E5=AF=BC=E8=87=B4=E4=B8=80=E4=BA=9B=E7=B3=BB=E7=BB= =9F=E8=B0=83=E7=94=A8=E5=AE=8C=E5=85=A8=E5=9C=A8=E7=94=A8=E6=88=B7=E7=A9=BA= =E9=97=B4=E4=B8=AD=E8=BF=90=E8=A1=8C=EF=BC=8C=E5=BD=93=E4=BD=A0=E5=9C=A8=E4= =B8=8D=E5=90=8C=E6=9C=BA=E5=99=A8=E4=B8=8A=E8=B7=91=E7=A8=8B=E5=BA=8F=E6=97= =B6=E5=8F=AF=E8=83=BD=E5=AF=BC=E8=87=B4=E5=9B=9E=E9=80=80 +=E5=88=B0=E7=9C=9F=E6=AD=A3=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E7=9A=84= =E6=84=8F=E5=A4=96=E5=8F=91=E7=94=9F=E3=80=82=E4=B8=BA=E4=BA=86=E5=9C=A8x86= =E4=B8=8A=E6=9C=80=E5=B0=8F=E5=8C=96=E8=BF=99=E4=BA=9B=E6=84=8F=E5=A4=96=E7= =9A=84=E5=8F=91=E7=94=9F=EF=BC=8C=E8=AF=B7=E7=A1=AE=E4=BF=9D=E4=BD=A0=E5=9C= =A8=E6=B5=8B=E8=AF=95=E6=97=B6=E6=8A=8A +``/sys/devices/system/clocksource/clocksource0/current_clocksource`` =E8= =AE=BE=E7=BD=AE=E4=B8=BA +``acpi_pm`` =E4=B9=8B=E7=B1=BB=E7=9A=84=E5=80=BC=E3=80=82 + +=E5=9C=A8x86-64=E4=B8=8A=EF=BC=8Cvsyscall=E6=A8=A1=E6=8B=9F=E9=BB=98=E8=AE= =A4=E5=BC=80=E5=90=AF=E3=80=82=EF=BC=88vsyscalls=E6=98=AFvDSO=E8=B0=83=E7= =94=A8=E7=9A=84=E4=BC=A0=E7=BB=9F=E5=8F=98=E4=BD=93=E3=80=82=EF=BC=89=E7=9B= =AE=E5=89=8D=EF=BC=8C=E6=A8=A1=E6=8B=9F +vsyscalls=E4=BC=9A=E9=81=B5=E5=AE=88seccomp=EF=BC=8C=E4=BD=86=E6=98=AF=E6= =9C=89=E4=B8=80=E4=BA=9B=E5=A5=87=E6=80=AA=E6=83=85=E5=86=B5=EF=BC=9A + +- ``SECCOMP_RET_TRAP`` =E7=9A=84=E8=BF=94=E5=9B=9E=E5=80=BC=E4=BC=9A=E8=AE= =BE=E7=BD=AE=E4=B8=80=E4=B8=AA=E6=8C=87=E5=90=91=E7=BB=99=E5=AE=9Avsyscall= =E5=85=A5=E5=8F=A3=E7=9A=84 ``si_call_addr``=EF=BC=8C + =E8=80=8C=E4=B8=8D=E6=98=AF'syscall'=E6=8C=87=E4=BB=A4=E4=B9=8B=E5=90=8E= =E7=9A=84=E5=9C=B0=E5=9D=80=E3=80=82=E4=BB=BB=E4=BD=95=E6=83=B3=E9=87=8D=E6= =96=B0=E5=BC=80=E5=A7=8B=E8=B0=83=E7=94=A8=E7=9A=84=E4=BB=A3=E7=A0=81=E9=83= =BD=E9=9C=80=E8=A6=81=E6=B3=A8=E6=84=8F (a) ret=E6=8C=87=E4=BB=A4 + =E5=B7=B2=E8=A2=AB=E6=A8=A1=E6=8B=9F=EF=BC=8C(b) =E8=AF=95=E5=9B=BE=E6= =81=A2=E5=A4=8D=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E5=B0=86=E5=86=8D=E6=AC= =A1=E8=A7=A6=E5=8F=91=E6=A0=87=E5=87=86vsyscall=E6=A8=A1=E6=8B=9F=E5=AE=89= =E5=85=A8=E6=A3=80=E6=9F=A5=EF=BC=8C=E4=BD=BF=E5=BE=97=E6=81=A2=E5=A4=8D=E7= =B3=BB=E7=BB=9F + =E8=B0=83=E7=94=A8=E5=9C=A8=E5=A4=A7=E9=83=A8=E5=88=86=E6=83=85=E5=86=B5= =E4=B8=8B=E6=B2=A1=E6=9C=89=E6=84=8F=E4=B9=89=E3=80=82 + +- ``SECCOMP_RET_TRACE`` =E7=9A=84=E8=BF=94=E5=9B=9E=E5=80=BC=E5=B0=86=E5= =83=8F=E5=BE=80=E5=B8=B8=E4=B8=80=E6=A0=B7=E7=BB=99=E8=BF=BD=E8=B8=AA=E5=99= =A8=E5=8F=91=E5=87=BA=E4=BF=A1=E5=8F=B7=EF=BC=8C=E4=BD=86=E6=98=AF=E7=B3=BB= =E7=BB=9F=E8=B0=83=E7=94=A8=E5=8F=AF=E8=83=BD=E4=B8=8D=E8=83=BD + =E4=BD=BF=E7=94=A8orig_rax=E5=AF=84=E5=AD=98=E5=99=A8=E6=94=B9=E5=8F=98= =E4=B8=BA=E5=8F=A6=E4=B8=80=E4=B8=AA=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E3= =80=82=E5=8F=AF=E8=83=BD=E5=8F=AA=E8=83=BD=E6=94=B9=E5=8F=98=E4=B8=BA-1=E6= =9D=A5=E8=B7=B3=E8=BF=87=E5=BD=93=E5=89=8D=E6=A8=A1=E6=8B=9F=E7=9A=84=E8=B0= =83=E7=94=A8=E3=80=82 + =E4=BB=BB=E4=BD=95=E5=85=B6=E4=BB=96=E6=94=B9=E5=8F=98=E9=83=BD=E5=8F=AF= =E8=83=BD=E7=BB=88=E6=AD=A2=E8=BF=9B=E7=A8=8B=E3=80=82=E8=BF=BD=E8=B8=AA=E5= =99=A8=E7=9C=8B=E5=88=B0=E7=9A=84rip=E5=80=BC=E5=B0=86=E6=98=AF=E7=B3=BB=E7= =BB=9F=E8=B0=83=E7=94=A8=E7=9A=84=E5=85=A5=E5=8F=A3=E5=9C=B0=E5=9D=80=EF=BC= =9B=E8=BF=99=E5=92=8C=E6=AD=A3=E5=B8=B8=E8=A1=8C=E4=B8=BA + =E4=B8=8D=E5=90=8C=E3=80=82=E8=BF=BD=E8=B8=AA=E5=99=A8=E7=A6=81=E6=AD=A2= =E4=BF=AE=E6=94=B9rip=E6=88=96=E8=80=85rsp=E3=80=82=EF=BC=88=E4=B8=8D=E8=A6= =81=E4=BE=9D=E8=B5=96=E5=85=B6=E4=BB=96=E6=94=B9=E5=8F=98=E6=9D=A5=E7=BB=88= =E6=AD=A2=E8=BF=9B=E7=A8=8B=EF=BC=8C=E5=AE=83=E4=BB=AC=E5=8F=AF=E8=83=BD=E6= =AD=A3=E5=B8=B8=E5=B7=A5=E4=BD=9C=E3=80=82 + =E6=AF=94=E5=A6=82=E5=9C=A8=E4=B8=80=E4=BA=9B=E5=86=85=E6=A0=B8=E4=B8=AD= =EF=BC=8C=E9=80=89=E6=8B=A9=E4=B8=80=E4=B8=AA=E5=8F=AA=E5=AD=98=E5=9C=A8=E4= =BA=8E=E6=9C=AA=E6=9D=A5=E5=86=85=E6=A0=B8=E4=B8=AD=E7=9A=84=E7=B3=BB=E7=BB= =9F=E8=B0=83=E7=94=A8=E5=B0=86=E8=A2=AB=E6=AD=A3=E7=A1=AE=E6=A8=A1=E6=8B=9F= =EF=BC=8C=E8=BF=94=E5=9B=9E=E4=B8=80=E4=B8=AA + ``-ENOSYS`` =E3=80=82=EF=BC=89 + +=E8=A6=81=E6=A3=80=E6=B5=8B=E8=BF=99=E4=B8=AA=E5=8F=A4=E6=80=AA=E7=9A=84= =E8=A1=8C=E4=B8=BA=EF=BC=8C=E5=8F=AF=E4=BB=A5=E6=A3=80=E6=9F=A5 ``addr & ~0= x0C00 =3D=3D 0xFFFFFFFFFF600000``=E3=80=82=EF=BC=88=E5=AF=B9=E4=BA=8E +``SECCOMP_RET_TRACE`` =EF=BC=8C=E4=BD=BF=E7=94=A8rip=E3=80=82=E5=AF=B9=E4= =BA=8E ``SECCOMP_RET_TRAP`` =EF=BC=8C=E4=BD=BF=E7=94=A8 +``siginfo->si_call_addr`` =E3=80=82=EF=BC=89=E4=B8=8D=E8=A6=81=E6=A3=80=E6= =B5=8B=E5=85=B6=E4=BB=96=E6=9D=A1=E4=BB=B6=EF=BC=9A=E6=9C=AA=E6=9D=A5=E5=86= =85=E6=A0=B8=E5=8F=AF=E8=83=BD=E4=BC=9A=E6=94=B9=E8=BF=9Bvsyscall=E6=A8=A1= =E6=8B=9F=EF=BC=8C +=E5=BD=93=E5=89=8D=E5=86=85=E6=A0=B8=E5=9C=A8vsyscall=3Dnative=E6=A8=A1=E5= =BC=8F=E4=B8=8B=E4=BC=9A=E6=9C=89=E4=B8=8D=E5=90=8C=E8=A1=A8=E7=8E=B0=EF=BC= =8C=E4=BD=86=E5=9C=A8=E8=BF=99=E4=BA=9B=E6=83=85=E5=86=B5=E4=B8=8B=EF=BC=8C= ``0xF...F600{0,4,8,C}00`` +=E5=A4=84=E7=9A=84=E6=8C=87=E4=BB=A4=E5=B0=86=E4=B8=8D=E6=98=AF=E7=B3=BB= =E7=BB=9F=E8=B0=83=E7=94=A8=E3=80=82 + +=E8=AF=B7=E6=B3=A8=E6=84=8F=EF=BC=8C=E7=8E=B0=E4=BB=A3=E7=B3=BB=E7=BB=9F= =E6=A0=B9=E6=9C=AC=E4=B8=8D=E5=8F=AF=E8=83=BD=E4=BD=BF=E7=94=A8vsyscalls = =E2=80=94=E2=80=94 =E5=AE=83=E4=BB=AC=E6=98=AF=E4=B8=80=E7=A7=8D=E9=81=97= =E7=95=99=E5=8A=9F=E8=83=BD=EF=BC=8C=E8=80=8C=E4=B8=94=E6=AF=94=E6=A0=87=E5= =87=86=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8 +=E6=85=A2=E5=BE=97=E5=A4=9A=E3=80=82 =E6=96=B0=E7=9A=84=E4=BB=A3=E7=A0=81= =E5=B0=86=E4=BD=BF=E7=94=A8vDSO=EF=BC=8C=E8=80=8CvDSO=E5=8F=91=E5=87=BA=E7= =9A=84=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E4=B8=8E=E6=AD=A3=E5=B8=B8=E7=9A= =84=E7=B3=BB=E7=BB=9F=E8=B0=83=E7=94=A8=E6=B2=A1=E6=9C=89=E5=8C=BA=E5=88=AB= =E3=80=82 --=20 2.30.2