Commit 2810c258 authored by Cyrill Gorcunov's avatar Cyrill Gorcunov Committed by Pavel Emelyanov

seccomp: Move seccomp_info into seccomp.h

This header is main place for all seccomp related
structures so move seccomp_info here. This will
allow to minimize changes area when need to update
definitions and such.
Reviewed-by: 's avatarDmitry Safonov <0x7f454c46@gmail.com>
Signed-off-by: 's avatarCyrill Gorcunov <gorcunov@gmail.com>
Signed-off-by: 's avatarAndrei Vagin <avagin@virtuozzo.com>
parent 532d2798
...@@ -4,7 +4,6 @@ ...@@ -4,7 +4,6 @@
#include <sys/types.h> #include <sys/types.h>
#include <compel/compel.h> #include <compel/compel.h>
#include "images/seccomp.pb-c.h"
#define PROC_TASK_COMM_LEN 32 #define PROC_TASK_COMM_LEN 32
#define PROC_TASK_COMM_LEN_FMT "(%31s" #define PROC_TASK_COMM_LEN_FMT "(%31s"
...@@ -64,12 +63,6 @@ struct proc_pid_stat { ...@@ -64,12 +63,6 @@ struct proc_pid_stat {
int exit_code; int exit_code;
}; };
struct seccomp_info {
SeccompFilter filter;
int id;
struct seccomp_info *prev;
};
#define PROC_CAP_SIZE 2 #define PROC_CAP_SIZE 2
struct proc_status_creds { struct proc_status_creds {
......
...@@ -4,6 +4,7 @@ ...@@ -4,6 +4,7 @@
#include <linux/seccomp.h> #include <linux/seccomp.h>
#include <linux/filter.h> #include <linux/filter.h>
#include "images/seccomp.pb-c.h"
#include "images/core.pb-c.h" #include "images/core.pb-c.h"
#ifndef SECCOMP_MODE_DISABLED #ifndef SECCOMP_MODE_DISABLED
...@@ -26,6 +27,12 @@ ...@@ -26,6 +27,12 @@
#define SECCOMP_FILTER_FLAG_TSYNC 1 #define SECCOMP_FILTER_FLAG_TSYNC 1
#endif #endif
struct seccomp_info {
struct seccomp_info *prev;
int id;
SeccompFilter filter;
};
extern int collect_seccomp_filters(void); extern int collect_seccomp_filters(void);
extern int prepare_seccomp_filters(void); extern int prepare_seccomp_filters(void);
struct task_restore_args; struct task_restore_args;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment