Add KILL as a synonym for DENY
authorJagger <robert@swiecki.net>
Wed, 4 May 2016 23:18:14 +0000 (01:18 +0200)
committerJagger <robert@swiecki.net>
Wed, 4 May 2016 23:18:14 +0000 (01:18 +0200)
seccomp/bpf-helper.h

index 29c70712195095926116393bb8ae0073cb64bcd7..a2cf09449633a0496a98f3541e4e03509ecabf22 100644 (file)
@@ -45,6 +45,8 @@ void seccomp_bpf_print(struct sock_filter *filter, size_t count);
        BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_ALLOW)
 #define DENY \
        BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_KILL)
+#define KILL \
+       BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_KILL)
 #define ERRNO(val) \
        BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_ERRNO | (val & SECCOMP_RET_DATA))