-- Hoogle documentation, generated by Haddock -- See Hoogle, http://www.haskell.org/hoogle/ -- | Haskell bindings to libseccomp -- -- Bindings to libseccomp. See System.Linux.Seccomp for docs. @package hsseccomp @version 0.1.0.2 -- | This module provides partial bindings to libseccomp. It is very low -- level, modelled closely after the c library. -- -- Missing: -- -- -- -- Simple example: The following kills all systemcalls other than opening -- a file for readonly: -- -- 
--   ctx <- S.seccomp_init S.SCMP_ACT_KILL
--   _ <- S.seccomp_rule_add_array ctx S.SCMP_ACT_KILL S.SCopen [S.ArgCmp 1 S.MASQUED_EQ 0x3 0x1]
--   _ <- S.seccomp_load ctx
--   S.seccomp_release ctx
--
-- -- For debugging it's useful to dump a text representation of the filter -- context to stderr (file descriptor number 2): -- -- 
--   S.seccomp_export_pfc ctx 2
--
module System.Linux.Seccomp seccomp_init :: Action -> IO (Ptr CFilterCtx) seccomp_reset :: Ptr CFilterCtx -> Action -> IO CInt seccomp_rule_add_array :: Ptr CFilterCtx -> Action -> SysCall -> [ArgCmp] -> IO CInt seccomp_load :: Ptr CFilterCtx -> IO CInt seccomp_merge :: Ptr CFilterCtx -> Ptr CFilterCtx -> IO CInt seccomp_export_pfc :: Ptr CFilterCtx -> Int -> IO CInt seccomp_release :: Ptr CFilterCtx -> IO () seccomp_syscall_priority :: Ptr CFilterCtx -> SysCall -> Word8 -> IO CInt data Action SCMP_ACT_KILL :: Action SCMP_ACT_TRAP :: Action SCMP_ACT_ERRNO :: Int -> Action SCMP_ACT_TRACE :: Int -> Action SCMP_ACT_ALLOW :: Action data SysCall SCsocket :: SysCall SCbind :: SysCall SCconnect :: SysCall SClisten :: SysCall SCaccept :: SysCall SCgetsockname :: SysCall SCgetpeername :: SysCall SCsocketpair :: SysCall SCsend :: SysCall SCrecv :: SysCall SCsendto :: SysCall SCrecvfrom :: SysCall SCshutdown :: SysCall SCsetsockopt :: SysCall SCgetsockopt :: SysCall SCsendmsg :: SysCall SCrecvmsg :: SysCall SCaccept4 :: SysCall SCrecvmmsg :: SysCall SCsendmmsg :: SysCall SCsemop :: SysCall SCsemget :: SysCall SCsemctl :: SysCall SCsemtimedop :: SysCall SCmsgsnd :: SysCall SCmsgrcv :: SysCall SCmsgget :: SysCall SCmsgctl :: SysCall SCshmat :: SysCall SCshmdt :: SysCall SCshmget :: SysCall SCshmctl :: SysCall SCarch_prctl :: SysCall SCbdflush :: SysCall SCbreak :: SysCall SCchown32 :: SysCall SCepoll_ctl_old :: SysCall SCepoll_wait_old :: SysCall SCfadvise64_64 :: SysCall SCfchown32 :: SysCall SCfcntl64 :: SysCall SCfstat64 :: SysCall SCfstatat64 :: SysCall SCfstatfs64 :: SysCall SCftime :: SysCall SCftruncate64 :: SysCall SCgetegid32 :: SysCall SCgeteuid32 :: SysCall SCgetgid32 :: SysCall SCgetgroups32 :: SysCall SCgetresgid32 :: SysCall SCgetresuid32 :: SysCall SCgetuid32 :: SysCall SCgtty :: SysCall SCidle :: SysCall SCipc :: SysCall SClchown32 :: SysCall SC_llseek :: SysCall SClock :: SysCall SClstat64 :: SysCall SCmmap2 :: SysCall SCmpx :: SysCall SCnewfstatat :: SysCall SC_newselect :: SysCall SCnice :: SysCall SColdfstat :: SysCall SColdlstat :: SysCall SColdolduname :: SysCall SColdstat :: SysCall SColduname :: SysCall SCprof :: SysCall SCprofil :: SysCall SCreaddir :: SysCall SCsecurity :: SysCall SCsendfile64 :: SysCall SCsetfsgid32 :: SysCall SCsetfsuid32 :: SysCall SCsetgid32 :: SysCall SCsetgroups32 :: SysCall SCsetregid32 :: SysCall SCsetresgid32 :: SysCall SCsetresuid32 :: SysCall SCsetreuid32 :: SysCall SCsetuid32 :: SysCall SCsgetmask :: SysCall SCsigaction :: SysCall SCsignal :: SysCall SCsigpending :: SysCall SCsigprocmask :: SysCall SCsigreturn :: SysCall SCsigsuspend :: SysCall SCsocketcall :: SysCall SCssetmask :: SysCall SCstat64 :: SysCall SCstatfs64 :: SysCall SCstime :: SysCall SCstty :: SysCall SCtruncate64 :: SysCall SCtuxcall :: SysCall SCugetrlimit :: SysCall SCulimit :: SysCall SCumount :: SysCall SCvm86 :: SysCall SCvm86old :: SysCall SCwaitpid :: SysCall SCcreate_module :: SysCall SCget_kernel_syms :: SysCall SCget_thread_area :: SysCall SCnfsservctl :: SysCall SCquery_module :: SysCall SCset_thread_area :: SysCall SC_sysctl :: SysCall SCuselib :: SysCall SCvserver :: SysCall SCarm_fadvise64_64 :: SysCall SCarm_sync_file_range :: SysCall SCpciconfig_iobase :: SysCall SCpciconfig_read :: SysCall SCpciconfig_write :: SysCall SCsync_file_range2 :: SysCall SCsyscall :: SysCall SCafs_syscall :: SysCall SCfadvise64 :: SysCall SCgetpmsg :: SysCall SCioperm :: SysCall SCiopl :: SysCall SCmigrate_pages :: SysCall SCmodify_ldt :: SysCall SCputpmsg :: SysCall SCsync_file_range :: SysCall SCselect :: SysCall SCvfork :: SysCall SCcachectl :: SysCall SCcacheflush :: SysCall SCsysmips :: SysCall SCtimerfd :: SysCall SCtime :: SysCall SCgetrandom :: SysCall SCmemfd_create :: SysCall SCkexec_file_load :: SysCall SCsysfs :: SysCall SColdwait4 :: SysCall SCaccess :: SysCall SCalarm :: SysCall SCchmod :: SysCall SCchown :: SysCall SCcreat :: SysCall SCdup2 :: SysCall SCepoll_create :: SysCall SCepoll_wait :: SysCall SCeventfd :: SysCall SCfork :: SysCall SCfutimesat :: SysCall SCgetdents :: SysCall SCgetpgrp :: SysCall SCinotify_init :: SysCall SClchown :: SysCall SClink :: SysCall SClstat :: SysCall SCmkdir :: SysCall SCmknod :: SysCall SCopen :: SysCall SCpause :: SysCall SCpipe :: SysCall SCpoll :: SysCall SCreadlink :: SysCall SCrename :: SysCall SCrmdir :: SysCall SCsignalfd :: SysCall SCstat :: SysCall SCsymlink :: SysCall SCunlink :: SysCall SCustat :: SysCall SCutime :: SysCall SCutimes :: SysCall SCgetrlimit :: SysCall SCmmap :: SysCall SCbreakpoint :: SysCall SCset_tls :: SysCall SCusr26 :: SysCall SCusr32 :: SysCall data ArgCmp ArgCmp :: Int -> ArgCmpOp -> Int -> Int -> ArgCmp [argCmpPos] :: ArgCmp -> Int [argCmpOp] :: ArgCmp -> ArgCmpOp [argCmpDatumA] :: ArgCmp -> Int [argCmpDatumB] :: ArgCmp -> Int data ArgCmpOp NE :: ArgCmpOp LT :: ArgCmpOp LE :: ArgCmpOp EQ :: ArgCmpOp GE :: ArgCmpOp GT :: ArgCmpOp MASQUED_EQ :: ArgCmpOp instance Foreign.Storable.Storable System.Linux.Seccomp.ArgCmp