如何在centos6中安装linux/seccomp.h

Question

内核头rpm似乎不包括seccomp.h，我想知道在centos6上哪里可以找到seccomp.h头文件？

Answer 1

如果您正在编译一些依赖于这个特定标题的内容，那么您就不太可能将这个头文件放在适当的位置，并使您的应用程序工作，因为内核头是相互关联和相互关联的。

来自kernel-headers-3.10.0-1127.19.1.el7.x86_64.rpm 7的CentOS 7包含此文件。这是我能提供的最好的了。

#ifndef _LINUX_SECCOMP_H
#define _LINUX_SECCOMP_H


#include <linux/types.h>


/* Valid values for seccomp.mode and prctl(PR_SET_SECCOMP, <mode>) */
#define SECCOMP_MODE_DISABLED   0 /* seccomp is not in use. */
#define SECCOMP_MODE_STRICT 1 /* uses hard-coded filter. */
#define SECCOMP_MODE_FILTER 2 /* uses user-supplied filter. */

/* Valid operations for seccomp syscall. */
#define SECCOMP_SET_MODE_STRICT     0
#define SECCOMP_SET_MODE_FILTER     1
#define SECCOMP_GET_ACTION_AVAIL    2

/* Valid flags for SECCOMP_SET_MODE_FILTER */
#define SECCOMP_FILTER_FLAG_TSYNC   (1UL << 0)
#define SECCOMP_FILTER_FLAG_SPEC_ALLOW  (1UL << 2)

/*
 * All BPF programs must return a 32-bit value.
 * The bottom 16-bits are for optional return data.
 * The upper 16-bits are ordered from least permissive values to most.
 *
 * The ordering ensures that a min_t() over composed return values always
 * selects the least permissive choice.
 */
#define SECCOMP_RET_KILL    0x00000000U /* kill the task immediately */
#define SECCOMP_RET_TRAP    0x00030000U /* disallow and force a SIGSYS */
#define SECCOMP_RET_ERRNO   0x00050000U /* returns an errno */
#define SECCOMP_RET_TRACE   0x7ff00000U /* pass to a tracer or disallow */
#define SECCOMP_RET_ALLOW   0x7fff0000U /* allow */

/* Masks for the return value sections. */
#define SECCOMP_RET_ACTION  0x7fff0000U
#define SECCOMP_RET_DATA    0x0000ffffU

/**
 * struct seccomp_data - the format the BPF program executes over.
 * @nr: the system call number
 * @arch: indicates system call convention as an AUDIT_ARCH_* value
 *        as defined in <linux/audit.h>.
 * @instruction_pointer: at the time of the system call.
 * @args: up to 6 system call arguments always stored as 64-bit values
 *        regardless of the architecture.
 */
struct seccomp_data {
    int nr;
    __u32 arch;
    __u64 instruction_pointer;
    __u64 args[6];
};

#endif /* _LINUX_SECCOMP_H */