seccomp-tools 1.6.2 → 1.7.1

data/lib/seccomp-tools/consts/sys_arg.rb

@@ -11,26 +11,32 @@
   io_pgetevents: %w[ctx_id min_nr nr events timeout sig],
   io_pgetevents_time32: %w[ctx_id min_nr nr events timeout sig],
   io_uring_setup: %w[entries p],
-  io_uring_enter: %w[fd to_submit min_complete flags sig sigsz],
+  io_uring_enter: %w[fd to_submit min_complete flags argp argsz],
   io_uring_register: %w[fd op arg nr_args],
   setxattr: %w[path name value size flags],
+  setxattrat: %w[dfd path at_flags name args size],
   lsetxattr: %w[path name value size flags],
   fsetxattr: %w[fd name value size flags],
   getxattr: %w[path name value size],
+  getxattrat: %w[dfd path at_flags name args size],
   lgetxattr: %w[path name value size],
   fgetxattr: %w[fd name value size],
   listxattr: %w[path list size],
+  listxattrat: %w[dfd path at_flags list size],
   llistxattr: %w[path list size],
   flistxattr: %w[fd list size],
   removexattr: %w[path name],
+  removexattrat: %w[dfd path at_flags name],
   lremovexattr: %w[path name],
   fremovexattr: %w[fd name],
+  file_getattr: %w[dfd filename attr usize at_flags],
+  file_setattr: %w[dfd filename attr usize at_flags],
   getcwd: %w[buf size],
-  lookup_dcookie: %w[cookie64 buf len],
   eventfd2: %w[count flags],
   epoll_create1: %w[flags],
   epoll_ctl: %w[epfd op fd event],
   epoll_pwait: %w[epfd events maxevents timeout sigmask sigsetsize],
+  epoll_pwait2: %w[epfd events maxevents timeout sigmask sigsetsize],
   dup: %w[fildes],
   dup3: %w[oldfd newfd flags],
   fcntl: %w[fd cmd arg],
@@ -55,24 +61,32 @@
   statfs64: %w[path sz buf],
   fstatfs: %w[fd buf],
   fstatfs64: %w[fd sz buf],
+  statmount: %w[req buf bufsize flags],
+  listmount: %w[req mnt_ids nr_mnt_ids flags],
+  listns: %w[req ns_ids nr_ns_ids flags],
   truncate: %w[path length],
   ftruncate: %w[fd length],
   truncate64: %w[path length],
   ftruncate64: %w[fd length],
   fallocate: %w[fd mode offset len],
   faccessat: %w[dfd filename mode],
+  faccessat2: %w[dfd filename mode flags],
   chdir: %w[filename],
   fchdir: %w[fd],
   chroot: %w[filename],
   fchmod: %w[fd mode],
   fchmodat: %w[dfd filename mode],
+  fchmodat2: %w[dfd filename mode flags],
   fchownat: %w[dfd filename user group flag],
   fchown: %w[fd user group],
   openat: %w[dfd filename flags mode],
+  openat2: %w[dfd filename how size],
   close: %w[fd],
+  close_range: %w[fd max_fd flags],
   vhangup: %w[],
   pipe2: %w[fildes flags],
   quotactl: %w[cmd special id addr],
+  quotactl_fd: %w[fd cmd id addr],
   getdents64: %w[fd dirent count],
   llseek: %w[fd offset_high offset_low result whence],
   lseek: %w[fd offset whence],
@@ -119,6 +133,10 @@
   futex_time32: %w[uaddr op val utime uaddr2 val3],
   get_robust_list: %w[pid head_ptr len_ptr],
   set_robust_list: %w[head len],
+  futex_waitv: %w[waiters nr_futexes flags timeout clockid],
+  futex_wake: %w[uaddr mask nr flags],
+  futex_wait: %w[uaddr val mask flags timespec clockid],
+  futex_requeue: %w[waiters flags nr_wake nr_requeue],
   nanosleep: %w[rqtp rmtp],
   nanosleep_time32: %w[rqtp rmtp],
   getitimer: %w[which value],
@@ -241,6 +259,7 @@
   add_key: %w[_type _description _payload plen destringid],
   request_key: %w[_type _description _callout_info destringid],
   keyctl: %w[cmd arg2 arg3 arg4 arg5],
+  clone3: %w[uargs size],
   execve: %w[filename argv envp],
   fadvise64_64: %w[fd offset len advice],
   swapon: %w[specialfile swap_flags],
@@ -253,7 +272,10 @@
   munlockall: %w[],
   mincore: %w[start len vec],
   madvise: %w[start len behavior],
+  process_madvise: %w[pidfd vec vlen behavior flags],
+  process_mrelease: %w[pidfd flags],
   remap_file_pages: %w[start size prot pgoff flags],
+  mseal: %w[start len flags],
   mbind: %w[start len mode nmask maxnode flags],
   get_mempolicy: %w[policy nmask maxnode addr flags],
   set_mempolicy: %w[mode nmask maxnode],
@@ -273,6 +295,7 @@
   clock_adjtime32: %w[which_clock tx],
   syncfs: %w[fd],
   setns: %w[fd nstype],
+  pidfd_open: %w[pid flags],
   sendmmsg: %w[fd msg vlen flags],
   process_vm_readv: %w[pid lvec liovcnt rvec riovcnt flags],
   process_vm_writev: %w[pid lvec liovcnt rvec riovcnt flags],
@@ -287,7 +310,7 @@
   bpf: %w[cmd attr size],
   execveat: %w[dfd filename argv envp flags],
   userfaultfd: %w[flags],
-  membarrier: %w[cmd flags],
+  membarrier: %w[cmd flags cpu_id],
   mlock2: %w[start len flags],
   copy_file_range: %w[fd_in off_in fd_out off_out len flags],
   preadv2: %w[fd vec vlen pos_l pos_h flags],
@@ -297,14 +320,30 @@
   pkey_free: %w[pkey],
   statx: %w[dfd path flags mask buffer],
   rseq: %w[rseq rseq_len flags sig],
+  rseq_slice_yield: %w[],
   open_tree: %w[dfd path flags],
+  open_tree_attr: %w[dfd path flags uattr usize],
   move_mount: %w[from_dfd from_path to_dfd to_path ms_flags],
+  mount_setattr: %w[dfd path flags uattr usize],
   fsopen: %w[fs_name flags],
   fsconfig: %w[fs_fd cmd key value aux],
   fsmount: %w[fs_fd flags ms_flags],
   fspick: %w[dfd path flags],
   pidfd_send_signal: %w[pidfd sig info flags],
+  pidfd_getfd: %w[pidfd fd flags],
+  landlock_create_ruleset: %w[attr size flags],
+  landlock_add_rule: %w[ruleset_fd rule_type rule_attr flags],
+  landlock_restrict_self: %w[ruleset_fd flags],
+  memfd_secret: %w[flags],
+  set_mempolicy_home_node: %w[start len home_node flags],
+  cachestat: %w[fd cstat_range cstat flags],
+  map_shadow_stack: %w[addr size flags],
+  lsm_get_self_attr: %w[attr ctx size flags],
+  lsm_set_self_attr: %w[attr ctx size flags],
+  lsm_list_modules: %w[ids size flags],
   ioperm: %w[from num on],
+  uretprobe: %w[],
+  uprobe: %w[],
   pciconfig_read: %w[bus dfn off len buf],
   pciconfig_write: %w[bus dfn off len buf],
   pciconfig_iobase: %w[which bus devfn],
@@ -352,10 +391,8 @@
   epoll_wait: %w[epfd events maxevents timeout],
   ustat: %w[dev ubuf],
   vfork: %w[],
-  bdflush: %w[func data],
   oldumount: %w[name],
   uselib: %w[library],
-  sysctl: %w[args],
   sysfs: %w[option arg1 arg2],
   fork: %w[],
   stime: %w[tptr],
@@ -399,6 +436,7 @@
   mmap_pgoff: %w[addr len prot flags fd pgoff],
   old_mmap: %w[arg],
   ni_syscall: %w[],
+  ni_posix_timers: %w[],
   io_submit: %w[ctx_id nr iocbpp],
   pselect6: %w[n inp outp exp tsp sig],
   pselect6_time32: %w[n inp outp exp tsp sig],

data/lib/seccomp-tools/consts/sys_nr/aarch64.rb

@@ -280,5 +280,56 @@
   pkey_mprotect: 288,
   pkey_alloc: 289,
   pkey_free: 290,
-  statx: 291
+  statx: 291,
+  io_pgetevents: 292,
+  rseq: 293,
+  kexec_file_load: 294,
+  pidfd_send_signal: 424,
+  io_uring_setup: 425,
+  io_uring_enter: 426,
+  io_uring_register: 427,
+  open_tree: 428,
+  move_mount: 429,
+  fsopen: 430,
+  fsconfig: 431,
+  fsmount: 432,
+  fspick: 433,
+  pidfd_open: 434,
+  clone3: 435,
+  close_range: 436,
+  openat2: 437,
+  pidfd_getfd: 438,
+  faccessat2: 439,
+  process_madvise: 440,
+  epoll_pwait2: 441,
+  mount_setattr: 442,
+  quotactl_fd: 443,
+  landlock_create_ruleset: 444,
+  landlock_add_rule: 445,
+  landlock_restrict_self: 446,
+  memfd_secret: 447,
+  process_mrelease: 448,
+  futex_waitv: 449,
+  set_mempolicy_home_node: 450,
+  cachestat: 451,
+  fchmodat2: 452,
+  map_shadow_stack: 453,
+  futex_wake: 454,
+  futex_wait: 455,
+  futex_requeue: 456,
+  statmount: 457,
+  listmount: 458,
+  lsm_get_self_attr: 459,
+  lsm_set_self_attr: 460,
+  lsm_list_modules: 461,
+  mseal: 462,
+  setxattrat: 463,
+  getxattrat: 464,
+  listxattrat: 465,
+  removexattrat: 466,
+  open_tree_attr: 467,
+  file_getattr: 468,
+  file_setattr: 469,
+  listns: 470,
+  rseq_slice_yield: 471
 }

data/lib/seccomp-tools/consts/sys_nr/amd64.rb

@@ -337,5 +337,57 @@ X32_MODE_BIT = 0x40000000
   pkey_mprotect: 329,
   pkey_alloc: 330,
   pkey_free: 331,
-  statx: 332
+  statx: 332,
+  io_pgetevents: 333,
+  rseq: 334,
+  uretprobe: 335,
+  uprobe: 336,
+  pidfd_send_signal: 424,
+  io_uring_setup: 425,
+  io_uring_enter: 426,
+  io_uring_register: 427,
+  open_tree: 428,
+  move_mount: 429,
+  fsopen: 430,
+  fsconfig: 431,
+  fsmount: 432,
+  fspick: 433,
+  pidfd_open: 434,
+  clone3: 435,
+  close_range: 436,
+  openat2: 437,
+  pidfd_getfd: 438,
+  faccessat2: 439,
+  process_madvise: 440,
+  epoll_pwait2: 441,
+  mount_setattr: 442,
+  quotactl_fd: 443,
+  landlock_create_ruleset: 444,
+  landlock_add_rule: 445,
+  landlock_restrict_self: 446,
+  memfd_secret: 447,
+  process_mrelease: 448,
+  futex_waitv: 449,
+  set_mempolicy_home_node: 450,
+  cachestat: 451,
+  fchmodat2: 452,
+  map_shadow_stack: 453,
+  futex_wake: 454,
+  futex_wait: 455,
+  futex_requeue: 456,
+  statmount: 457,
+  listmount: 458,
+  lsm_get_self_attr: 459,
+  lsm_set_self_attr: 460,
+  lsm_list_modules: 461,
+  mseal: 462,
+  setxattrat: 463,
+  getxattrat: 464,
+  listxattrat: 465,
+  removexattrat: 466,
+  open_tree_attr: 467,
+  file_getattr: 468,
+  file_setattr: 469,
+  listns: 470,
+  rseq_slice_yield: 471
 }.tap { |h| h.keys.each { |k| h[:"x32_#{k}"] = h[k] | X32_MODE_BIT } }

data/lib/seccomp-tools/consts/sys_nr/i386.rb

@@ -282,7 +282,7 @@
   mq_timedreceive: 280,
   mq_notify: 281,
   mq_getsetattr: 282,
-  sys_kexec_load: 283,
+  kexec_load: 283,
   waitid: 284,
   add_key: 286,
   request_key: 287,
@@ -381,5 +381,86 @@
   pkey_mprotect: 380,
   pkey_alloc: 381,
   pkey_free: 382,
-  statx: 383
+  statx: 383,
+  arch_prctl: 384,
+  io_pgetevents: 385,
+  rseq: 386,
+  semget: 393,
+  semctl: 394,
+  shmget: 395,
+  shmctl: 396,
+  shmat: 397,
+  shmdt: 398,
+  msgget: 399,
+  msgsnd: 400,
+  msgrcv: 401,
+  msgctl: 402,
+  clock_gettime64: 403,
+  clock_settime64: 404,
+  clock_adjtime64: 405,
+  clock_getres_time64: 406,
+  clock_nanosleep_time64: 407,
+  timer_gettime64: 408,
+  timer_settime64: 409,
+  timerfd_gettime64: 410,
+  timerfd_settime64: 411,
+  utimensat_time64: 412,
+  pselect6_time64: 413,
+  ppoll_time64: 414,
+  io_pgetevents_time64: 416,
+  recvmmsg_time64: 417,
+  mq_timedsend_time64: 418,
+  mq_timedreceive_time64: 419,
+  semtimedop_time64: 420,
+  rt_sigtimedwait_time64: 421,
+  futex_time64: 422,
+  sched_rr_get_interval_time64: 423,
+  pidfd_send_signal: 424,
+  io_uring_setup: 425,
+  io_uring_enter: 426,
+  io_uring_register: 427,
+  open_tree: 428,
+  move_mount: 429,
+  fsopen: 430,
+  fsconfig: 431,
+  fsmount: 432,
+  fspick: 433,
+  pidfd_open: 434,
+  clone3: 435,
+  close_range: 436,
+  openat2: 437,
+  pidfd_getfd: 438,
+  faccessat2: 439,
+  process_madvise: 440,
+  epoll_pwait2: 441,
+  mount_setattr: 442,
+  quotactl_fd: 443,
+  landlock_create_ruleset: 444,
+  landlock_add_rule: 445,
+  landlock_restrict_self: 446,
+  memfd_secret: 447,
+  process_mrelease: 448,
+  futex_waitv: 449,
+  set_mempolicy_home_node: 450,
+  cachestat: 451,
+  fchmodat2: 452,
+  map_shadow_stack: 453,
+  futex_wake: 454,
+  futex_wait: 455,
+  futex_requeue: 456,
+  statmount: 457,
+  listmount: 458,
+  lsm_get_self_attr: 459,
+  lsm_set_self_attr: 460,
+  lsm_list_modules: 461,
+  mseal: 462,
+  setxattrat: 463,
+  getxattrat: 464,
+  listxattrat: 465,
+  removexattrat: 466,
+  open_tree_attr: 467,
+  file_getattr: 468,
+  file_setattr: 469,
+  listns: 470,
+  rseq_slice_yield: 471
 }

data/lib/seccomp-tools/consts/sys_nr/riscv64.rb

@@ -0,0 +1,332 @@
+# frozen_string_literal: true
+
+{
+  io_setup: 0,
+  io_destroy: 1,
+  io_submit: 2,
+  io_cancel: 3,
+  io_getevents: 4,
+  setxattr: 5,
+  lsetxattr: 6,
+  fsetxattr: 7,
+  getxattr: 8,
+  lgetxattr: 9,
+  fgetxattr: 10,
+  listxattr: 11,
+  llistxattr: 12,
+  flistxattr: 13,
+  removexattr: 14,
+  lremovexattr: 15,
+  fremovexattr: 16,
+  getcwd: 17,
+  lookup_dcookie: 18,
+  eventfd2: 19,
+  epoll_create1: 20,
+  epoll_ctl: 21,
+  epoll_pwait: 22,
+  dup: 23,
+  dup3: 24,
+  fcntl: 25,
+  inotify_init1: 26,
+  inotify_add_watch: 27,
+  inotify_rm_watch: 28,
+  ioctl: 29,
+  ioprio_set: 30,
+  ioprio_get: 31,
+  flock: 32,
+  mknodat: 33,
+  mkdirat: 34,
+  unlinkat: 35,
+  symlinkat: 36,
+  linkat: 37,
+  umount2: 39,
+  mount: 40,
+  pivot_root: 41,
+  nfsservctl: 42,
+  statfs: 43,
+  fstatfs: 44,
+  truncate: 45,
+  ftruncate: 46,
+  fallocate: 47,
+  faccessat: 48,
+  chdir: 49,
+  fchdir: 50,
+  chroot: 51,
+  fchmod: 52,
+  fchmodat: 53,
+  fchownat: 54,
+  fchown: 55,
+  openat: 56,
+  close: 57,
+  vhangup: 58,
+  pipe2: 59,
+  quotactl: 60,
+  getdents64: 61,
+  lseek: 62,
+  read: 63,
+  write: 64,
+  readv: 65,
+  writev: 66,
+  pread64: 67,
+  pwrite64: 68,
+  preadv: 69,
+  pwritev: 70,
+  sendfile: 71,
+  pselect6: 72,
+  ppoll: 73,
+  signalfd4: 74,
+  vmsplice: 75,
+  splice: 76,
+  tee: 77,
+  readlinkat: 78,
+  newfstatat: 79,
+  fstat: 80,
+  sync: 81,
+  fsync: 82,
+  fdatasync: 83,
+  sync_file_range: 84,
+  timerfd_create: 85,
+  timerfd_settime: 86,
+  timerfd_gettime: 87,
+  utimensat: 88,
+  acct: 89,
+  capget: 90,
+  capset: 91,
+  personality: 92,
+  exit: 93,
+  exit_group: 94,
+  waitid: 95,
+  set_tid_address: 96,
+  unshare: 97,
+  futex: 98,
+  set_robust_list: 99,
+  get_robust_list: 100,
+  nanosleep: 101,
+  getitimer: 102,
+  setitimer: 103,
+  kexec_load: 104,
+  init_module: 105,
+  delete_module: 106,
+  timer_create: 107,
+  timer_gettime: 108,
+  timer_getoverrun: 109,
+  timer_settime: 110,
+  timer_delete: 111,
+  clock_settime: 112,
+  clock_gettime: 113,
+  clock_getres: 114,
+  clock_nanosleep: 115,
+  syslog: 116,
+  ptrace: 117,
+  sched_setparam: 118,
+  sched_setscheduler: 119,
+  sched_getscheduler: 120,
+  sched_getparam: 121,
+  sched_setaffinity: 122,
+  sched_getaffinity: 123,
+  sched_yield: 124,
+  sched_get_priority_max: 125,
+  sched_get_priority_min: 126,
+  sched_rr_get_interval: 127,
+  restart_syscall: 128,
+  kill: 129,
+  tkill: 130,
+  tgkill: 131,
+  sigaltstack: 132,
+  rt_sigsuspend: 133,
+  rt_sigaction: 134,
+  rt_sigprocmask: 135,
+  rt_sigpending: 136,
+  rt_sigtimedwait: 137,
+  rt_sigqueueinfo: 138,
+  rt_sigreturn: 139,
+  setpriority: 140,
+  getpriority: 141,
+  reboot: 142,
+  setregid: 143,
+  setgid: 144,
+  setreuid: 145,
+  setuid: 146,
+  setresuid: 147,
+  getresuid: 148,
+  setresgid: 149,
+  getresgid: 150,
+  setfsuid: 151,
+  setfsgid: 152,
+  times: 153,
+  setpgid: 154,
+  getpgid: 155,
+  getsid: 156,
+  setsid: 157,
+  getgroups: 158,
+  setgroups: 159,
+  uname: 160,
+  sethostname: 161,
+  setdomainname: 162,
+  getrlimit: 163,
+  setrlimit: 164,
+  getrusage: 165,
+  umask: 166,
+  prctl: 167,
+  getcpu: 168,
+  gettimeofday: 169,
+  settimeofday: 170,
+  adjtimex: 171,
+  getpid: 172,
+  getppid: 173,
+  getuid: 174,
+  geteuid: 175,
+  getgid: 176,
+  getegid: 177,
+  gettid: 178,
+  sysinfo: 179,
+  mq_open: 180,
+  mq_unlink: 181,
+  mq_timedsend: 182,
+  mq_timedreceive: 183,
+  mq_notify: 184,
+  mq_getsetattr: 185,
+  msgget: 186,
+  msgctl: 187,
+  msgrcv: 188,
+  msgsnd: 189,
+  semget: 190,
+  semctl: 191,
+  semtimedop: 192,
+  semop: 193,
+  shmget: 194,
+  shmctl: 195,
+  shmat: 196,
+  shmdt: 197,
+  socket: 198,
+  socketpair: 199,
+  bind: 200,
+  listen: 201,
+  accept: 202,
+  connect: 203,
+  getsockname: 204,
+  getpeername: 205,
+  sendto: 206,
+  recvfrom: 207,
+  setsockopt: 208,
+  getsockopt: 209,
+  shutdown: 210,
+  sendmsg: 211,
+  recvmsg: 212,
+  readahead: 213,
+  brk: 214,
+  munmap: 215,
+  mremap: 216,
+  add_key: 217,
+  request_key: 218,
+  keyctl: 219,
+  clone: 220,
+  execve: 221,
+  mmap: 222,
+  fadvise64: 223,
+  swapon: 224,
+  swapoff: 225,
+  mprotect: 226,
+  msync: 227,
+  mlock: 228,
+  munlock: 229,
+  mlockall: 230,
+  munlockall: 231,
+  mincore: 232,
+  madvise: 233,
+  remap_file_pages: 234,
+  mbind: 235,
+  get_mempolicy: 236,
+  set_mempolicy: 237,
+  migrate_pages: 238,
+  move_pages: 239,
+  rt_tgsigqueueinfo: 240,
+  perf_event_open: 241,
+  accept4: 242,
+  recvmmsg: 243,
+  riscv_hwprobe: 258,
+  riscv_flush_icache: 259,
+  wait4: 260,
+  prlimit64: 261,
+  fanotify_init: 262,
+  fanotify_mark: 263,
+  name_to_handle_at: 264,
+  open_by_handle_at: 265,
+  clock_adjtime: 266,
+  syncfs: 267,
+  setns: 268,
+  sendmmsg: 269,
+  process_vm_readv: 270,
+  process_vm_writev: 271,
+  kcmp: 272,
+  finit_module: 273,
+  sched_setattr: 274,
+  sched_getattr: 275,
+  renameat2: 276,
+  seccomp: 277,
+  getrandom: 278,
+  memfd_create: 279,
+  bpf: 280,
+  execveat: 281,
+  userfaultfd: 282,
+  membarrier: 283,
+  mlock2: 284,
+  copy_file_range: 285,
+  preadv2: 286,
+  pwritev2: 287,
+  pkey_mprotect: 288,
+  pkey_alloc: 289,
+  pkey_free: 290,
+  statx: 291,
+  io_pgetevents: 292,
+  rseq: 293,
+  kexec_file_load: 294,
+  pidfd_send_signal: 424,
+  io_uring_setup: 425,
+  io_uring_enter: 426,
+  io_uring_register: 427,
+  open_tree: 428,
+  move_mount: 429,
+  fsopen: 430,
+  fsconfig: 431,
+  fsmount: 432,
+  fspick: 433,
+  pidfd_open: 434,
+  clone3: 435,
+  close_range: 436,
+  openat2: 437,
+  pidfd_getfd: 438,
+  faccessat2: 439,
+  process_madvise: 440,
+  epoll_pwait2: 441,
+  mount_setattr: 442,
+  quotactl_fd: 443,
+  landlock_create_ruleset: 444,
+  landlock_add_rule: 445,
+  landlock_restrict_self: 446,
+  memfd_secret: 447,
+  process_mrelease: 448,
+  futex_waitv: 449,
+  set_mempolicy_home_node: 450,
+  cachestat: 451,
+  fchmodat2: 452,
+  map_shadow_stack: 453,
+  futex_wake: 454,
+  futex_wait: 455,
+  futex_requeue: 456,
+  statmount: 457,
+  listmount: 458,
+  lsm_get_self_attr: 459,
+  lsm_set_self_attr: 460,
+  lsm_list_modules: 461,
+  mseal: 462,
+  setxattrat: 463,
+  getxattrat: 464,
+  listxattrat: 465,
+  removexattrat: 466,
+  open_tree_attr: 467,
+  file_getattr: 468,
+  file_setattr: 469,
+  listns: 470,
+  rseq_slice_yield: 471
+}