script_core 0.2.6 → 0.2.7

Sign up to get free protection for your applications and to get access to all the features.
Files changed (191) hide show
  1. checksums.yaml +4 -4
  2. data/ext/enterprise_script_service/libseccomp/.travis.yml +21 -7
  3. data/ext/enterprise_script_service/libseccomp/CHANGELOG +22 -0
  4. data/ext/enterprise_script_service/libseccomp/CONTRIBUTING.md +37 -26
  5. data/ext/enterprise_script_service/libseccomp/CREDITS +8 -0
  6. data/ext/enterprise_script_service/libseccomp/README.md +3 -1
  7. data/ext/enterprise_script_service/libseccomp/configure.ac +13 -8
  8. data/ext/enterprise_script_service/libseccomp/doc/Makefile.am +6 -0
  9. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_api_get.3 +12 -2
  10. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_arch_add.3 +38 -6
  11. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_attr_set.3 +53 -2
  12. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_export_bpf.3 +20 -2
  13. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_init.3 +9 -2
  14. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_load.3 +32 -2
  15. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_merge.3 +16 -2
  16. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_notify_alloc.3 +113 -0
  17. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_notify_fd.3 +1 -0
  18. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_notify_free.3 +1 -0
  19. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_notify_id_valid.3 +1 -0
  20. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_notify_receive.3 +1 -0
  21. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_notify_respond.3 +1 -0
  22. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_rule_add.3 +64 -3
  23. data/ext/enterprise_script_service/libseccomp/doc/man/man3/seccomp_syscall_priority.3 +18 -3
  24. data/ext/enterprise_script_service/libseccomp/include/seccomp-syscalls.h +12 -0
  25. data/ext/enterprise_script_service/libseccomp/include/seccomp.h.in +116 -0
  26. data/ext/enterprise_script_service/libseccomp/src/.gitignore +2 -0
  27. data/ext/enterprise_script_service/libseccomp/src/Makefile.am +31 -17
  28. data/ext/enterprise_script_service/libseccomp/src/api.c +254 -58
  29. data/ext/enterprise_script_service/libseccomp/src/arch-aarch64.h +1 -9
  30. data/ext/enterprise_script_service/libseccomp/src/arch-arm.c +47 -2
  31. data/ext/enterprise_script_service/libseccomp/src/arch-arm.h +1 -9
  32. data/ext/enterprise_script_service/libseccomp/src/arch-gperf-generate +40 -0
  33. data/ext/enterprise_script_service/libseccomp/src/arch-mips.c +41 -4
  34. data/ext/enterprise_script_service/libseccomp/src/arch-mips.h +2 -10
  35. data/ext/enterprise_script_service/libseccomp/src/arch-mips64.c +41 -4
  36. data/ext/enterprise_script_service/libseccomp/src/arch-mips64.h +3 -11
  37. data/ext/enterprise_script_service/libseccomp/src/arch-mips64n32.c +41 -4
  38. data/ext/enterprise_script_service/libseccomp/src/arch-mips64n32.h +2 -10
  39. data/ext/enterprise_script_service/libseccomp/src/arch-parisc.h +1 -10
  40. data/ext/enterprise_script_service/libseccomp/src/arch-parisc64.c +3 -3
  41. data/ext/enterprise_script_service/libseccomp/src/arch-parisc64.h +29 -0
  42. data/ext/enterprise_script_service/libseccomp/src/arch-ppc.h +1 -9
  43. data/ext/enterprise_script_service/libseccomp/src/arch-ppc64.c +606 -8
  44. data/ext/enterprise_script_service/libseccomp/src/arch-ppc64.h +2 -10
  45. data/ext/enterprise_script_service/libseccomp/src/arch-riscv64.c +31 -0
  46. data/ext/enterprise_script_service/libseccomp/src/arch-riscv64.h +22 -0
  47. data/ext/enterprise_script_service/libseccomp/src/arch-s390.c +171 -12
  48. data/ext/enterprise_script_service/libseccomp/src/arch-s390.h +1 -17
  49. data/ext/enterprise_script_service/libseccomp/src/arch-s390x.c +166 -10
  50. data/ext/enterprise_script_service/libseccomp/src/arch-s390x.h +1 -20
  51. data/ext/enterprise_script_service/libseccomp/src/arch-syscall-dump.c +8 -1
  52. data/ext/enterprise_script_service/libseccomp/src/arch-syscall-validate +359 -143
  53. data/ext/enterprise_script_service/libseccomp/src/arch-x32.c +36 -2
  54. data/ext/enterprise_script_service/libseccomp/src/arch-x32.h +2 -10
  55. data/ext/enterprise_script_service/libseccomp/src/arch-x86.c +172 -10
  56. data/ext/enterprise_script_service/libseccomp/src/arch-x86.h +1 -14
  57. data/ext/enterprise_script_service/libseccomp/src/arch-x86_64.h +1 -9
  58. data/ext/enterprise_script_service/libseccomp/src/arch.c +11 -3
  59. data/ext/enterprise_script_service/libseccomp/src/arch.h +7 -0
  60. data/ext/enterprise_script_service/libseccomp/src/db.c +268 -57
  61. data/ext/enterprise_script_service/libseccomp/src/db.h +16 -2
  62. data/ext/enterprise_script_service/libseccomp/src/gen_bpf.c +503 -148
  63. data/ext/enterprise_script_service/libseccomp/src/gen_bpf.h +2 -1
  64. data/ext/enterprise_script_service/libseccomp/src/gen_pfc.c +165 -37
  65. data/ext/enterprise_script_service/libseccomp/src/python/libseccomp.pxd +37 -1
  66. data/ext/enterprise_script_service/libseccomp/src/python/seccomp.pyx +295 -5
  67. data/ext/enterprise_script_service/libseccomp/src/syscalls.c +56 -0
  68. data/ext/enterprise_script_service/libseccomp/src/syscalls.csv +470 -0
  69. data/ext/enterprise_script_service/libseccomp/src/syscalls.h +62 -0
  70. data/ext/enterprise_script_service/libseccomp/src/syscalls.perf.template +82 -0
  71. data/ext/enterprise_script_service/libseccomp/src/system.c +196 -16
  72. data/ext/enterprise_script_service/libseccomp/src/system.h +68 -13
  73. data/ext/enterprise_script_service/libseccomp/tests/.gitignore +9 -2
  74. data/ext/enterprise_script_service/libseccomp/tests/06-sim-actions.tests +1 -1
  75. data/ext/enterprise_script_service/libseccomp/tests/11-basic-basic_errors.c +5 -5
  76. data/ext/enterprise_script_service/libseccomp/tests/13-basic-attrs.c +35 -1
  77. data/ext/enterprise_script_service/libseccomp/tests/13-basic-attrs.py +10 -1
  78. data/ext/enterprise_script_service/libseccomp/tests/15-basic-resolver.c +1 -0
  79. data/ext/enterprise_script_service/libseccomp/tests/16-sim-arch_basic.c +12 -0
  80. data/ext/enterprise_script_service/libseccomp/tests/16-sim-arch_basic.py +1 -0
  81. data/ext/enterprise_script_service/libseccomp/tests/{18-sim-basic_whitelist.c → 18-sim-basic_allowlist.c} +0 -0
  82. data/ext/enterprise_script_service/libseccomp/tests/{18-sim-basic_whitelist.py → 18-sim-basic_allowlist.py} +0 -0
  83. data/ext/enterprise_script_service/libseccomp/tests/18-sim-basic_allowlist.tests +32 -0
  84. data/ext/enterprise_script_service/libseccomp/tests/23-sim-arch_all_le_basic.c +3 -0
  85. data/ext/enterprise_script_service/libseccomp/tests/23-sim-arch_all_le_basic.py +1 -0
  86. data/ext/enterprise_script_service/libseccomp/tests/30-sim-socket_syscalls.c +3 -0
  87. data/ext/enterprise_script_service/libseccomp/tests/30-sim-socket_syscalls.py +1 -0
  88. data/ext/enterprise_script_service/libseccomp/tests/30-sim-socket_syscalls.tests +33 -17
  89. data/ext/enterprise_script_service/libseccomp/tests/{34-sim-basic_blacklist.c → 34-sim-basic_denylist.c} +0 -0
  90. data/ext/enterprise_script_service/libseccomp/tests/{34-sim-basic_blacklist.py → 34-sim-basic_denylist.py} +0 -0
  91. data/ext/enterprise_script_service/libseccomp/tests/34-sim-basic_denylist.tests +32 -0
  92. data/ext/enterprise_script_service/libseccomp/tests/36-sim-ipc_syscalls.c +3 -0
  93. data/ext/enterprise_script_service/libseccomp/tests/36-sim-ipc_syscalls.py +1 -0
  94. data/ext/enterprise_script_service/libseccomp/tests/36-sim-ipc_syscalls.tests +25 -25
  95. data/ext/enterprise_script_service/libseccomp/tests/39-basic-api_level.c +24 -3
  96. data/ext/enterprise_script_service/libseccomp/tests/39-basic-api_level.py +16 -1
  97. data/ext/enterprise_script_service/libseccomp/tests/47-live-kill_process.c +3 -3
  98. data/ext/enterprise_script_service/libseccomp/tests/51-live-user_notification.c +112 -0
  99. data/ext/enterprise_script_service/libseccomp/tests/51-live-user_notification.py +60 -0
  100. data/ext/enterprise_script_service/libseccomp/tests/51-live-user_notification.tests +11 -0
  101. data/ext/enterprise_script_service/libseccomp/tests/53-sim-binary_tree.c +156 -0
  102. data/ext/enterprise_script_service/libseccomp/tests/53-sim-binary_tree.py +95 -0
  103. data/ext/enterprise_script_service/libseccomp/tests/53-sim-binary_tree.tests +65 -0
  104. data/ext/enterprise_script_service/libseccomp/tests/54-live-binary_tree.c +128 -0
  105. data/ext/enterprise_script_service/libseccomp/tests/54-live-binary_tree.py +95 -0
  106. data/ext/enterprise_script_service/libseccomp/tests/54-live-binary_tree.tests +11 -0
  107. data/ext/enterprise_script_service/libseccomp/tests/55-basic-pfc_binary_tree.c +134 -0
  108. data/ext/enterprise_script_service/libseccomp/tests/55-basic-pfc_binary_tree.sh +46 -0
  109. data/ext/enterprise_script_service/libseccomp/tests/55-basic-pfc_binary_tree.tests +11 -0
  110. data/ext/enterprise_script_service/libseccomp/tests/56-basic-iterate_syscalls.c +90 -0
  111. data/ext/enterprise_script_service/libseccomp/tests/56-basic-iterate_syscalls.py +65 -0
  112. data/ext/enterprise_script_service/libseccomp/tests/56-basic-iterate_syscalls.tests +11 -0
  113. data/ext/enterprise_script_service/libseccomp/tests/57-basic-rawsysrc.c +64 -0
  114. data/ext/enterprise_script_service/libseccomp/tests/57-basic-rawsysrc.py +46 -0
  115. data/ext/enterprise_script_service/libseccomp/tests/57-basic-rawsysrc.tests +11 -0
  116. data/ext/enterprise_script_service/libseccomp/tests/58-live-tsync_notify.c +116 -0
  117. data/ext/enterprise_script_service/libseccomp/tests/58-live-tsync_notify.py +61 -0
  118. data/ext/enterprise_script_service/libseccomp/tests/58-live-tsync_notify.tests +11 -0
  119. data/ext/enterprise_script_service/libseccomp/tests/Makefile.am +31 -10
  120. data/ext/enterprise_script_service/libseccomp/tests/regression +6 -3
  121. data/ext/enterprise_script_service/libseccomp/tests/util.c +3 -3
  122. data/ext/enterprise_script_service/libseccomp/tools/check-syntax +1 -1
  123. data/ext/enterprise_script_service/libseccomp/tools/scmp_arch_detect.c +3 -0
  124. data/ext/enterprise_script_service/libseccomp/tools/scmp_bpf_disasm.c +4 -2
  125. data/ext/enterprise_script_service/libseccomp/tools/scmp_bpf_sim.c +2 -0
  126. data/ext/enterprise_script_service/libseccomp/tools/util.c +14 -12
  127. data/ext/enterprise_script_service/libseccomp/tools/util.h +7 -0
  128. data/ext/enterprise_script_service/mruby/.github/workflows/codeql-analysis.yml +51 -0
  129. data/ext/enterprise_script_service/mruby/Doxyfile +1 -1
  130. data/ext/enterprise_script_service/mruby/README.md +1 -1
  131. data/ext/enterprise_script_service/mruby/doc/guides/debugger.md +1 -1
  132. data/ext/enterprise_script_service/mruby/doc/limitations.md +10 -10
  133. data/ext/enterprise_script_service/mruby/include/mruby.h +13 -0
  134. data/ext/enterprise_script_service/mruby/include/mruby/boxing_word.h +0 -1
  135. data/ext/enterprise_script_service/mruby/include/mruby/proc.h +13 -8
  136. data/ext/enterprise_script_service/mruby/include/mruby/value.h +25 -29
  137. data/ext/enterprise_script_service/mruby/include/mruby/version.h +3 -3
  138. data/ext/enterprise_script_service/mruby/mrbgems/mruby-array-ext/src/array.c +5 -8
  139. data/ext/enterprise_script_service/mruby/mrbgems/mruby-bin-mirb/tools/mirb/mirb.c +2 -2
  140. data/ext/enterprise_script_service/mruby/mrbgems/mruby-bin-mrbc/tools/mrbc/mrbc.c +17 -10
  141. data/ext/enterprise_script_service/mruby/mrbgems/mruby-complex/mrblib/complex.rb +1 -1
  142. data/ext/enterprise_script_service/mruby/mrbgems/mruby-complex/src/complex.c +1 -2
  143. data/ext/enterprise_script_service/mruby/mrbgems/mruby-eval/src/eval.c +1 -1
  144. data/ext/enterprise_script_service/mruby/mrbgems/mruby-fiber/src/fiber.c +1 -2
  145. data/ext/enterprise_script_service/mruby/mrbgems/mruby-inline-struct/test/inline.c +3 -4
  146. data/ext/enterprise_script_service/mruby/mrbgems/mruby-io/src/file.c +1 -2
  147. data/ext/enterprise_script_service/mruby/mrbgems/mruby-io/src/file_test.c +9 -26
  148. data/ext/enterprise_script_service/mruby/mrbgems/mruby-io/src/io.c +1 -2
  149. data/ext/enterprise_script_service/mruby/mrbgems/mruby-kernel-ext/src/kernel.c +6 -8
  150. data/ext/enterprise_script_service/mruby/mrbgems/mruby-method/src/method.c +3 -4
  151. data/ext/enterprise_script_service/mruby/mrbgems/mruby-objectspace/src/mruby_objectspace.c +0 -1
  152. data/ext/enterprise_script_service/mruby/mrbgems/mruby-print/src/print.c +1 -2
  153. data/ext/enterprise_script_service/mruby/mrbgems/mruby-range-ext/src/range.c +1 -3
  154. data/ext/enterprise_script_service/mruby/mrbgems/mruby-rational/mrblib/rational.rb +1 -3
  155. data/ext/enterprise_script_service/mruby/mrbgems/mruby-sprintf/src/sprintf.c +3 -3
  156. data/ext/enterprise_script_service/mruby/mrbgems/mruby-string-ext/src/string.c +1 -2
  157. data/ext/enterprise_script_service/mruby/mrbgems/mruby-struct/src/struct.c +5 -11
  158. data/ext/enterprise_script_service/mruby/mrbgems/mruby-time/src/time.c +5 -10
  159. data/ext/enterprise_script_service/mruby/mrblib/00class.rb +10 -0
  160. data/ext/enterprise_script_service/mruby/src/array.c +14 -11
  161. data/ext/enterprise_script_service/mruby/src/class.c +22 -21
  162. data/ext/enterprise_script_service/mruby/src/error.c +1 -2
  163. data/ext/enterprise_script_service/mruby/src/etc.c +0 -1
  164. data/ext/enterprise_script_service/mruby/src/gc.c +5 -5
  165. data/ext/enterprise_script_service/mruby/src/hash.c +8 -15
  166. data/ext/enterprise_script_service/mruby/src/kernel.c +4 -7
  167. data/ext/enterprise_script_service/mruby/src/numeric.c +28 -60
  168. data/ext/enterprise_script_service/mruby/src/object.c +11 -1
  169. data/ext/enterprise_script_service/mruby/src/proc.c +7 -8
  170. data/ext/enterprise_script_service/mruby/src/range.c +4 -12
  171. data/ext/enterprise_script_service/mruby/src/string.c +24 -21
  172. data/ext/enterprise_script_service/mruby/src/symbol.c +1 -2
  173. data/ext/enterprise_script_service/mruby/src/vm.c +28 -24
  174. data/ext/enterprise_script_service/mruby/test/t/kernel.rb +7 -0
  175. data/lib/script_core/version.rb +1 -1
  176. metadata +45 -21
  177. data/ext/enterprise_script_service/libseccomp/src/arch-aarch64-syscalls.c +0 -559
  178. data/ext/enterprise_script_service/libseccomp/src/arch-arm-syscalls.c +0 -570
  179. data/ext/enterprise_script_service/libseccomp/src/arch-mips-syscalls.c +0 -562
  180. data/ext/enterprise_script_service/libseccomp/src/arch-mips64-syscalls.c +0 -562
  181. data/ext/enterprise_script_service/libseccomp/src/arch-mips64n32-syscalls.c +0 -562
  182. data/ext/enterprise_script_service/libseccomp/src/arch-parisc-syscalls.c +0 -542
  183. data/ext/enterprise_script_service/libseccomp/src/arch-ppc-syscalls.c +0 -559
  184. data/ext/enterprise_script_service/libseccomp/src/arch-ppc64-syscalls.c +0 -559
  185. data/ext/enterprise_script_service/libseccomp/src/arch-s390-syscalls.c +0 -642
  186. data/ext/enterprise_script_service/libseccomp/src/arch-s390x-syscalls.c +0 -642
  187. data/ext/enterprise_script_service/libseccomp/src/arch-x32-syscalls.c +0 -558
  188. data/ext/enterprise_script_service/libseccomp/src/arch-x86-syscalls.c +0 -692
  189. data/ext/enterprise_script_service/libseccomp/src/arch-x86_64-syscalls.c +0 -559
  190. data/ext/enterprise_script_service/libseccomp/tests/18-sim-basic_whitelist.tests +0 -32
  191. data/ext/enterprise_script_service/libseccomp/tests/34-sim-basic_blacklist.tests +0 -32
@@ -1,692 +0,0 @@
1
- /**
2
- * Enhanced Seccomp x86 Syscall Table
3
- *
4
- * Copyright (c) 2012 Red Hat <pmoore@redhat.com>
5
- * Author: Paul Moore <paul@paul-moore.com>
6
- */
7
-
8
- /*
9
- * This library is free software; you can redistribute it and/or modify it
10
- * under the terms of version 2.1 of the GNU Lesser General Public License as
11
- * published by the Free Software Foundation.
12
- *
13
- * This library is distributed in the hope that it will be useful, but WITHOUT
14
- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
15
- * FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
16
- * for more details.
17
- *
18
- * You should have received a copy of the GNU Lesser General Public License
19
- * along with this library; if not, see <http://www.gnu.org/licenses>.
20
- */
21
-
22
- #include <string.h>
23
-
24
- #include <seccomp.h>
25
-
26
- #include "arch.h"
27
- #include "arch-x86.h"
28
-
29
- /* NOTE: based on Linux v5.4-rc4 */
30
- const struct arch_syscall_def x86_syscall_table[] = { \
31
- { "_llseek", 140 },
32
- { "_newselect", 142 },
33
- { "_sysctl", 149 },
34
- { "accept", __PNR_accept },
35
- { "accept4", 364 },
36
- { "access", 33 },
37
- { "acct", 51 },
38
- { "add_key", 286 },
39
- { "adjtimex", 124 },
40
- { "afs_syscall", 137 },
41
- { "alarm", 27 },
42
- { "arm_fadvise64_64", __PNR_arm_fadvise64_64 },
43
- { "arm_sync_file_range", __PNR_arm_sync_file_range },
44
- { "arch_prctl", 384 },
45
- { "bdflush", 134 },
46
- { "bind", 361 },
47
- { "bpf", 357 },
48
- { "break", 17 },
49
- { "breakpoint", __PNR_breakpoint },
50
- { "brk", 45 },
51
- { "cachectl", __PNR_cachectl },
52
- { "cacheflush", __PNR_cacheflush },
53
- { "capget", 184 },
54
- { "capset", 185 },
55
- { "chdir", 12 },
56
- { "chmod", 15 },
57
- { "chown", 182 },
58
- { "chown32", 212 },
59
- { "chroot", 61 },
60
- { "clock_adjtime", 343 },
61
- { "clock_adjtime64", 405 },
62
- { "clock_getres", 266 },
63
- { "clock_getres_time64", 406 },
64
- { "clock_gettime", 265 },
65
- { "clock_gettime64", 403 },
66
- { "clock_nanosleep", 267 },
67
- { "clock_nanosleep_time64", 407 },
68
- { "clock_settime", 264 },
69
- { "clock_settime64", 404 },
70
- { "clone", 120 },
71
- { "clone3", 435 },
72
- { "close", 6 },
73
- { "connect", 362 },
74
- { "copy_file_range", 377 },
75
- { "creat", 8 },
76
- { "create_module", 127 },
77
- { "delete_module", 129 },
78
- { "dup", 41 },
79
- { "dup2", 63 },
80
- { "dup3", 330 },
81
- { "epoll_create", 254 },
82
- { "epoll_create1", 329 },
83
- { "epoll_ctl", 255 },
84
- { "epoll_ctl_old", __PNR_epoll_ctl_old },
85
- { "epoll_pwait", 319 },
86
- { "epoll_wait", 256 },
87
- { "epoll_wait_old", __PNR_epoll_wait_old },
88
- { "eventfd", 323 },
89
- { "eventfd2", 328 },
90
- { "execve", 11 },
91
- { "execveat", 358 },
92
- { "exit", 1 },
93
- { "exit_group", 252 },
94
- { "faccessat", 307 },
95
- { "fadvise64", 250 },
96
- { "fadvise64_64", 272 },
97
- { "fallocate", 324 },
98
- { "fanotify_init", 338 },
99
- { "fanotify_mark", 339 },
100
- { "fchdir", 133 },
101
- { "fchmod", 94 },
102
- { "fchmodat", 306 },
103
- { "fchown", 95 },
104
- { "fchown32", 207 },
105
- { "fchownat", 298 },
106
- { "fcntl", 55 },
107
- { "fcntl64", 221 },
108
- { "fdatasync", 148 },
109
- { "fgetxattr", 231 },
110
- { "finit_module", 350 },
111
- { "flistxattr", 234 },
112
- { "flock", 143 },
113
- { "fork", 2 },
114
- { "fremovexattr", 237 },
115
- { "fsconfig", 431 },
116
- { "fsetxattr", 228 },
117
- { "fsmount", 432 },
118
- { "fsopen", 430 },
119
- { "fspick", 433 },
120
- { "fstat", 108 },
121
- { "fstat64", 197 },
122
- { "fstatat64", 300 },
123
- { "fstatfs", 100 },
124
- { "fstatfs64", 269 },
125
- { "fsync", 118 },
126
- { "ftime", 35 },
127
- { "ftruncate", 93 },
128
- { "ftruncate64", 194 },
129
- { "futex", 240 },
130
- { "futex_time64", 422 },
131
- { "futimesat", 299 },
132
- { "get_kernel_syms", 130 },
133
- { "get_mempolicy", 275 },
134
- { "get_robust_list", 312 },
135
- { "get_thread_area", 244 },
136
- { "get_tls", __PNR_get_tls },
137
- { "getcpu", 318 },
138
- { "getcwd", 183 },
139
- { "getdents", 141 },
140
- { "getdents64", 220 },
141
- { "getegid", 50 },
142
- { "getegid32", 202 },
143
- { "geteuid", 49 },
144
- { "geteuid32", 201 },
145
- { "getgid", 47 },
146
- { "getgid32", 200 },
147
- { "getgroups", 80 },
148
- { "getgroups32", 205 },
149
- { "getitimer", 105 },
150
- { "getpeername", 368 },
151
- { "getpgid", 132 },
152
- { "getpgrp", 65 },
153
- { "getpid", 20 },
154
- { "getpmsg", 188 },
155
- { "getppid", 64 },
156
- { "getpriority", 96 },
157
- { "getrandom", 355 },
158
- { "getresgid", 171 },
159
- { "getresgid32", 211 },
160
- { "getresuid", 165 },
161
- { "getresuid32", 209 },
162
- { "getrlimit", 76 },
163
- { "getrusage", 77 },
164
- { "getsid", 147 },
165
- { "getsockname", 367 },
166
- { "getsockopt", 365 },
167
- { "gettid", 224 },
168
- { "gettimeofday", 78 },
169
- { "getuid", 24 },
170
- { "getuid32", 199 },
171
- { "getxattr", 229 },
172
- { "gtty", 32 },
173
- { "idle", 112 },
174
- { "init_module", 128 },
175
- { "inotify_add_watch", 292 },
176
- { "inotify_init", 291 },
177
- { "inotify_init1", 332 },
178
- { "inotify_rm_watch", 293 },
179
- { "io_cancel", 249 },
180
- { "io_destroy", 246 },
181
- { "io_getevents", 247 },
182
- { "io_pgetevents", 385 },
183
- { "io_pgetevents_time64", 416 },
184
- { "io_setup", 245 },
185
- { "io_submit", 248 },
186
- { "io_uring_setup", 425 },
187
- { "io_uring_enter", 426 },
188
- { "io_uring_register", 427 },
189
- { "ioctl", 54 },
190
- { "ioperm", 101 },
191
- { "iopl", 110 },
192
- { "ioprio_get", 290 },
193
- { "ioprio_set", 289 },
194
- { "ipc", 117 },
195
- { "kcmp", 349 },
196
- { "kexec_file_load", __PNR_kexec_file_load },
197
- { "kexec_load", 283 },
198
- { "keyctl", 288 },
199
- { "kill", 37 },
200
- { "lchown", 16 },
201
- { "lchown32", 198 },
202
- { "lgetxattr", 230 },
203
- { "link", 9 },
204
- { "linkat", 303 },
205
- { "listen", 363 },
206
- { "listxattr", 232 },
207
- { "llistxattr", 233 },
208
- { "lock", 53 },
209
- { "lookup_dcookie", 253 },
210
- { "lremovexattr", 236 },
211
- { "lseek", 19 },
212
- { "lsetxattr", 227 },
213
- { "lstat", 107 },
214
- { "lstat64", 196 },
215
- { "madvise", 219 },
216
- { "mbind", 274 },
217
- { "membarrier", 375 },
218
- { "memfd_create", 356 },
219
- { "migrate_pages", 294 },
220
- { "mincore", 218 },
221
- { "mkdir", 39 },
222
- { "mkdirat", 296 },
223
- { "mknod", 14 },
224
- { "mknodat", 297 },
225
- { "mlock", 150 },
226
- { "mlock2", 376 },
227
- { "mlockall", 152 },
228
- { "mmap", 90 },
229
- { "mmap2", 192 },
230
- { "modify_ldt", 123 },
231
- { "mount", 21 },
232
- { "move_mount", 429 },
233
- { "move_pages", 317 },
234
- { "mprotect", 125 },
235
- { "mpx", 56 },
236
- { "mq_getsetattr", 282 },
237
- { "mq_notify", 281 },
238
- { "mq_open", 277 },
239
- { "mq_timedreceive", 280 },
240
- { "mq_timedreceive_time64", 419 },
241
- { "mq_timedsend", 279 },
242
- { "mq_timedsend_time64", 418 },
243
- { "mq_unlink", 278 },
244
- { "mremap", 163 },
245
- { "msgctl", 402 },
246
- { "msgget", 399 },
247
- { "msgrcv", 401 },
248
- { "msgsnd", 400 },
249
- { "msync", 144 },
250
- { "multiplexer", __PNR_multiplexer },
251
- { "munlock", 151 },
252
- { "munlockall", 153 },
253
- { "munmap", 91 },
254
- { "name_to_handle_at", 341 },
255
- { "nanosleep", 162 },
256
- { "newfstatat", __PNR_newfstatat },
257
- { "nfsservctl", 169 },
258
- { "nice", 34 },
259
- { "oldfstat", 28 },
260
- { "oldlstat", 84 },
261
- { "oldolduname", 59 },
262
- { "oldstat", 18 },
263
- { "olduname", 109 },
264
- { "oldwait4", __PNR_oldwait4 },
265
- { "open", 5 },
266
- { "open_by_handle_at", 342 },
267
- { "open_tree", 428 },
268
- { "openat", 295 },
269
- { "pause", 29 },
270
- { "pciconfig_iobase", __PNR_pciconfig_iobase },
271
- { "pciconfig_read", __PNR_pciconfig_read },
272
- { "pciconfig_write", __PNR_pciconfig_write },
273
- { "perf_event_open", 336 },
274
- { "personality", 136 },
275
- { "pidfd_open", 434 },
276
- { "pidfd_send_signal", 424 },
277
- { "pipe", 42 },
278
- { "pipe2", 331 },
279
- { "pivot_root", 217 },
280
- { "pkey_alloc", 381 },
281
- { "pkey_free", 382 },
282
- { "pkey_mprotect", 380 },
283
- { "poll", 168 },
284
- { "ppoll", 309 },
285
- { "ppoll_time64", 414 },
286
- { "prctl", 172 },
287
- { "pread64", 180 },
288
- { "preadv", 333 },
289
- { "preadv2", 378 },
290
- { "prlimit64", 340 },
291
- { "process_vm_readv", 347 },
292
- { "process_vm_writev", 348 },
293
- { "prof", 44 },
294
- { "profil", 98 },
295
- { "pselect6", 308 },
296
- { "pselect6_time64", 413 },
297
- { "ptrace", 26 },
298
- { "putpmsg", 189 },
299
- { "pwrite64", 181 },
300
- { "pwritev", 334 },
301
- { "pwritev2", 379 },
302
- { "query_module", 167 },
303
- { "quotactl", 131 },
304
- { "read", 3 },
305
- { "readahead", 225 },
306
- { "readdir", 89 },
307
- { "readlink", 85 },
308
- { "readlinkat", 305 },
309
- { "readv", 145 },
310
- { "reboot", 88 },
311
- { "recv", __PNR_recv },
312
- { "recvfrom", 371 },
313
- { "recvmmsg", 337 },
314
- { "recvmmsg_time64", 417 },
315
- { "recvmsg", 372 },
316
- { "remap_file_pages", 257 },
317
- { "removexattr", 235 },
318
- { "rename", 38 },
319
- { "renameat", 302 },
320
- { "renameat2", 353 },
321
- { "request_key", 287 },
322
- { "restart_syscall", 0 },
323
- { "rmdir", 40 },
324
- { "rseq", 386 },
325
- { "rt_sigaction", 174 },
326
- { "rt_sigpending", 176 },
327
- { "rt_sigprocmask", 175 },
328
- { "rt_sigqueueinfo", 178 },
329
- { "rt_sigreturn", 173 },
330
- { "rt_sigsuspend", 179 },
331
- { "rt_sigtimedwait", 177 },
332
- { "rt_sigtimedwait_time64", 421 },
333
- { "rt_tgsigqueueinfo", 335 },
334
- { "rtas", __PNR_rtas },
335
- { "s390_guarded_storage", __PNR_s390_guarded_storage },
336
- { "s390_pci_mmio_read", __PNR_s390_pci_mmio_read },
337
- { "s390_pci_mmio_write", __PNR_s390_pci_mmio_write },
338
- { "s390_runtime_instr", __PNR_s390_runtime_instr },
339
- { "s390_sthyi", __PNR_s390_sthyi },
340
- { "sched_get_priority_max", 159 },
341
- { "sched_get_priority_min", 160 },
342
- { "sched_getaffinity", 242 },
343
- { "sched_getattr", 352 },
344
- { "sched_getparam", 155 },
345
- { "sched_getscheduler", 157 },
346
- { "sched_rr_get_interval", 161 },
347
- { "sched_rr_get_interval_time64", 423 },
348
- { "sched_setaffinity", 241 },
349
- { "sched_setattr", 351 },
350
- { "sched_setparam", 154 },
351
- { "sched_setscheduler", 156 },
352
- { "sched_yield", 158 },
353
- { "seccomp", 354 },
354
- { "security", __PNR_security },
355
- { "select", 82 },
356
- { "semctl", 394 },
357
- { "semget", 393 },
358
- { "semop", __PNR_semop },
359
- { "semtimedop", __PNR_semtimedop },
360
- { "semtimedop_time64", 420 },
361
- { "send", __PNR_send },
362
- { "sendfile", 187 },
363
- { "sendfile64", 239 },
364
- { "sendmmsg", 345 },
365
- { "sendmsg", 370 },
366
- { "sendto", 369 },
367
- { "set_mempolicy", 276 },
368
- { "set_robust_list", 311 },
369
- { "set_thread_area", 243 },
370
- { "set_tid_address", 258 },
371
- { "set_tls", __PNR_set_tls },
372
- { "setdomainname", 121 },
373
- { "setfsgid", 139 },
374
- { "setfsgid32", 216 },
375
- { "setfsuid", 138 },
376
- { "setfsuid32", 215 },
377
- { "setgid", 46 },
378
- { "setgid32", 214 },
379
- { "setgroups", 81 },
380
- { "setgroups32", 206 },
381
- { "sethostname", 74 },
382
- { "setitimer", 104 },
383
- { "setns", 346 },
384
- { "setpgid", 57 },
385
- { "setpriority", 97 },
386
- { "setregid", 71 },
387
- { "setregid32", 204 },
388
- { "setresgid", 170 },
389
- { "setresgid32", 210 },
390
- { "setresuid", 164 },
391
- { "setresuid32", 208 },
392
- { "setreuid", 70 },
393
- { "setreuid32", 203 },
394
- { "setrlimit", 75 },
395
- { "setsid", 66 },
396
- { "setsockopt", 366 },
397
- { "settimeofday", 79 },
398
- { "setuid", 23 },
399
- { "setuid32", 213 },
400
- { "setxattr", 226 },
401
- { "sgetmask", 68 },
402
- { "shmat", 397 },
403
- { "shmctl", 396 },
404
- { "shmdt", 398 },
405
- { "shmget", 395 },
406
- { "shutdown", 373 },
407
- { "sigaction", 67 },
408
- { "sigaltstack", 186 },
409
- { "signal", 48 },
410
- { "signalfd", 321 },
411
- { "signalfd4", 327 },
412
- { "sigpending", 73 },
413
- { "sigprocmask", 126 },
414
- { "sigreturn", 119 },
415
- { "sigsuspend", 72 },
416
- { "socket", 359 },
417
- { "socketcall", 102 },
418
- { "socketpair", 360 },
419
- { "splice", 313 },
420
- { "spu_create", __PNR_spu_create },
421
- { "spu_run", __PNR_spu_run },
422
- { "ssetmask", 69 },
423
- { "stat", 106 },
424
- { "stat64", 195 },
425
- { "statfs", 99 },
426
- { "statfs64", 268 },
427
- { "statx", 383 },
428
- { "stime", 25 },
429
- { "stty", 31 },
430
- { "subpage_prot", __PNR_subpage_prot },
431
- { "swapcontext", __PNR_swapcontext },
432
- { "swapoff", 115 },
433
- { "swapon", 87 },
434
- { "switch_endian", __PNR_switch_endian },
435
- { "symlink", 83 },
436
- { "symlinkat", 304 },
437
- { "sync", 36 },
438
- { "sync_file_range", 314 },
439
- { "sync_file_range2", __PNR_sync_file_range2 },
440
- { "syncfs", 344 },
441
- { "syscall", __PNR_syscall },
442
- { "sys_debug_setcontext", __PNR_sys_debug_setcontext },
443
- { "sysfs", 135 },
444
- { "sysinfo", 116 },
445
- { "syslog", 103 },
446
- { "sysmips", __PNR_sysmips },
447
- { "tee", 315 },
448
- { "tgkill", 270 },
449
- { "time", 13 },
450
- { "timer_create", 259 },
451
- { "timer_delete", 263 },
452
- { "timer_getoverrun", 262 },
453
- { "timer_gettime", 261 },
454
- { "timer_gettime64", 408 },
455
- { "timer_settime", 260 },
456
- { "timer_settime64", 409 },
457
- { "timerfd", __PNR_timerfd },
458
- { "timerfd_create", 322 },
459
- { "timerfd_gettime", 326 },
460
- { "timerfd_gettime64", 410 },
461
- { "timerfd_settime", 325 },
462
- { "timerfd_settime64", 411 },
463
- { "times", 43 },
464
- { "tkill", 238 },
465
- { "truncate", 92 },
466
- { "truncate64", 193 },
467
- { "tuxcall", __PNR_tuxcall },
468
- { "ugetrlimit", 191 },
469
- { "ulimit", 58 },
470
- { "umask", 60 },
471
- { "umount", 22 },
472
- { "umount2", 52 },
473
- { "uname", 122 },
474
- { "unlink", 10 },
475
- { "unlinkat", 301 },
476
- { "unshare", 310 },
477
- { "uselib", 86 },
478
- { "userfaultfd", 374 },
479
- { "usr26", __PNR_usr26 },
480
- { "usr32", __PNR_usr32 },
481
- { "ustat", 62 },
482
- { "utime", 30 },
483
- { "utimensat", 320 },
484
- { "utimensat_time64", 412 },
485
- { "utimes", 271 },
486
- { "vfork", 190 },
487
- { "vhangup", 111 },
488
- { "vm86", 166 },
489
- { "vm86old", 113 },
490
- { "vmsplice", 316 },
491
- { "vserver", 273 },
492
- { "wait4", 114 },
493
- { "waitid", 284 },
494
- { "waitpid", 7 },
495
- { "write", 4 },
496
- { "writev", 146 },
497
- { NULL, __NR_SCMP_ERROR },
498
- };
499
-
500
- /**
501
- * Resolve a syscall name to a number
502
- * @param name the syscall name
503
- *
504
- * Resolve the given syscall name to the syscall number using the syscall table.
505
- * Returns the syscall number on success, including negative pseudo syscall
506
- * numbers; returns __NR_SCMP_ERROR on failure.
507
- *
508
- */
509
- int x86_syscall_resolve_name(const char *name)
510
- {
511
- unsigned int iter;
512
- const struct arch_syscall_def *table = x86_syscall_table;
513
-
514
- /* XXX - plenty of room for future improvement here */
515
-
516
- if (strcmp(name, "accept") == 0)
517
- return __PNR_accept;
518
- else if (strcmp(name, "accept4") == 0)
519
- return __PNR_accept4;
520
- else if (strcmp(name, "bind") == 0)
521
- return __PNR_bind;
522
- else if (strcmp(name, "connect") == 0)
523
- return __PNR_connect;
524
- else if (strcmp(name, "getpeername") == 0)
525
- return __PNR_getpeername;
526
- else if (strcmp(name, "getsockname") == 0)
527
- return __PNR_getsockname;
528
- else if (strcmp(name, "getsockopt") == 0)
529
- return __PNR_getsockopt;
530
- else if (strcmp(name, "listen") == 0)
531
- return __PNR_listen;
532
- else if (strcmp(name, "recv") == 0)
533
- return __PNR_recv;
534
- else if (strcmp(name, "recvfrom") == 0)
535
- return __PNR_recvfrom;
536
- else if (strcmp(name, "recvmsg") == 0)
537
- return __PNR_recvmsg;
538
- else if (strcmp(name, "recvmmsg") == 0)
539
- return __PNR_recvmmsg;
540
- else if (strcmp(name, "send") == 0)
541
- return __PNR_send;
542
- else if (strcmp(name, "sendmsg") == 0)
543
- return __PNR_sendmsg;
544
- else if (strcmp(name, "sendmmsg") == 0)
545
- return __PNR_sendmmsg;
546
- else if (strcmp(name, "sendto") == 0)
547
- return __PNR_sendto;
548
- else if (strcmp(name, "setsockopt") == 0)
549
- return __PNR_setsockopt;
550
- else if (strcmp(name, "shutdown") == 0)
551
- return __PNR_shutdown;
552
- else if (strcmp(name, "socket") == 0)
553
- return __PNR_socket;
554
- else if (strcmp(name, "socketpair") == 0)
555
- return __PNR_socketpair;
556
-
557
- if (strcmp(name, "semop") == 0)
558
- return __PNR_semop;
559
- else if (strcmp(name, "semget") == 0)
560
- return __PNR_semget;
561
- else if (strcmp(name, "semctl") == 0)
562
- return __PNR_semctl;
563
- else if (strcmp(name, "semtimedop") == 0)
564
- return __PNR_semtimedop;
565
- else if (strcmp(name, "msgsnd") == 0)
566
- return __PNR_msgsnd;
567
- else if (strcmp(name, "msgrcv") == 0)
568
- return __PNR_msgrcv;
569
- else if (strcmp(name, "msgget") == 0)
570
- return __PNR_msgget;
571
- else if (strcmp(name, "msgctl") == 0)
572
- return __PNR_msgctl;
573
- else if (strcmp(name, "shmat") == 0)
574
- return __PNR_shmat;
575
- else if (strcmp(name, "shmdt") == 0)
576
- return __PNR_shmdt;
577
- else if (strcmp(name, "shmget") == 0)
578
- return __PNR_shmget;
579
- else if (strcmp(name, "shmctl") == 0)
580
- return __PNR_shmctl;
581
-
582
- for (iter = 0; table[iter].name != NULL; iter++) {
583
- if (strcmp(name, table[iter].name) == 0)
584
- return table[iter].num;
585
- }
586
-
587
- return __NR_SCMP_ERROR;
588
- }
589
-
590
- /**
591
- * Resolve a syscall number to a name
592
- * @param num the syscall number
593
- *
594
- * Resolve the given syscall number to the syscall name using the syscall table.
595
- * Returns a pointer to the syscall name string on success, including pseudo
596
- * syscall names; returns NULL on failure.
597
- *
598
- */
599
- const char *x86_syscall_resolve_num(int num)
600
- {
601
- unsigned int iter;
602
- const struct arch_syscall_def *table = x86_syscall_table;
603
-
604
- /* XXX - plenty of room for future improvement here */
605
-
606
- if (num == __PNR_accept)
607
- return "accept";
608
- else if (num == __PNR_accept4)
609
- return "accept4";
610
- else if (num == __PNR_bind)
611
- return "bind";
612
- else if (num == __PNR_connect)
613
- return "connect";
614
- else if (num == __PNR_getpeername)
615
- return "getpeername";
616
- else if (num == __PNR_getsockname)
617
- return "getsockname";
618
- else if (num == __PNR_getsockopt)
619
- return "getsockopt";
620
- else if (num == __PNR_listen)
621
- return "listen";
622
- else if (num == __PNR_recv)
623
- return "recv";
624
- else if (num == __PNR_recvfrom)
625
- return "recvfrom";
626
- else if (num == __PNR_recvmsg)
627
- return "recvmsg";
628
- else if (num == __PNR_recvmmsg)
629
- return "recvmmsg";
630
- else if (num == __PNR_send)
631
- return "send";
632
- else if (num == __PNR_sendmsg)
633
- return "sendmsg";
634
- else if (num == __PNR_sendmmsg)
635
- return "sendmmsg";
636
- else if (num == __PNR_sendto)
637
- return "sendto";
638
- else if (num == __PNR_setsockopt)
639
- return "setsockopt";
640
- else if (num == __PNR_shutdown)
641
- return "shutdown";
642
- else if (num == __PNR_socket)
643
- return "socket";
644
- else if (num == __PNR_socketpair)
645
- return "socketpair";
646
-
647
- if (num == __PNR_semop)
648
- return "semop";
649
- else if (num == __PNR_semget)
650
- return "semget";
651
- else if (num == __PNR_semctl)
652
- return "semctl";
653
- else if (num == __PNR_semtimedop)
654
- return "semtimedop";
655
- else if (num == __PNR_msgsnd)
656
- return "msgsnd";
657
- else if (num == __PNR_msgrcv)
658
- return "msgrcv";
659
- else if (num == __PNR_msgget)
660
- return "msgget";
661
- else if (num == __PNR_msgctl)
662
- return "msgctl";
663
- else if (num == __PNR_shmat)
664
- return "shmat";
665
- else if (num == __PNR_shmdt)
666
- return "shmdt";
667
- else if (num == __PNR_shmget)
668
- return "shmget";
669
- else if (num == __PNR_shmctl)
670
- return "shmctl";
671
-
672
- for (iter = 0; table[iter].num != __NR_SCMP_ERROR; iter++) {
673
- if (num == table[iter].num)
674
- return table[iter].name;
675
- }
676
-
677
- return NULL;
678
- }
679
-
680
- /**
681
- * Iterate through the syscall table and return the syscall mapping
682
- * @param spot the offset into the syscall table
683
- *
684
- * Return the syscall mapping at position @spot or NULL on failure. This
685
- * function should only ever be used internally by libseccomp.
686
- *
687
- */
688
- const struct arch_syscall_def *x86_syscall_iterate(unsigned int spot)
689
- {
690
- /* XXX - no safety checks here */
691
- return &x86_syscall_table[spot];
692
- }