sandbox/linux/seccomp-bpf/linux_seccomp.h

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef SANDBOX_LINUX_SECCOMP_BPF_LINUX_SECCOMP_H__
   6 #define SANDBOX_LINUX_SECCOMP_BPF_LINUX_SECCOMP_H__
   7
   8 // The Seccomp2 kernel ABI is not part of older versions of glibc.
   9 // As we can't break compilation with these versions of the library,
  10 // we explicitly define all missing symbols.
  11 // If we ever decide that we can now rely on system headers, the following
  12 // include files should be enabled:
  13 // #include <linux/audit.h>
  14 // #include <linux/seccomp.h>
  15
  16 #include <asm/unistd.h>
  17 #include <linux/filter.h>
  18
  19 #include <sys/cdefs.h>
  20 // Old Bionic versions do not have sys/user.h.  The if can be removed once we no
  21 // longer need to support these old Bionic versions.
  22 // All x86_64 builds use a new enough bionic to have sys/user.h.
  23 #if !defined(__BIONIC__) || defined(__x86_64__)
  24 #include <sys/types.h>  // Fix for gcc 4.7, make sure __uint16_t is defined.
  25 #include <sys/user.h>
  26 #if defined(__mips__)
  27 // sys/user.h in eglibc misses size_t definition
  28 #include <stddef.h>
  29 #endif
  30 #endif
  31
  32 // For audit.h
  33 #ifndef EM_ARM
  34 #define EM_ARM    40
  35 #endif
  36 #ifndef EM_386
  37 #define EM_386    3
  38 #endif
  39 #ifndef EM_X86_64
  40 #define EM_X86_64 62
  41 #endif
  42 #ifndef EM_MIPS
  43 #define EM_MIPS   8
  44 #endif
  45 #ifndef EM_AARCH64
  46 #define EM_AARCH64 183
  47 #endif
  48
  49 #ifndef __AUDIT_ARCH_64BIT
  50 #define __AUDIT_ARCH_64BIT 0x80000000
  51 #endif
  52 #ifndef __AUDIT_ARCH_LE
  53 #define __AUDIT_ARCH_LE    0x40000000
  54 #endif
  55 #ifndef AUDIT_ARCH_ARM
  56 #define AUDIT_ARCH_ARM    (EM_ARM|__AUDIT_ARCH_LE)
  57 #endif
  58 #ifndef AUDIT_ARCH_I386
  59 #define AUDIT_ARCH_I386   (EM_386|__AUDIT_ARCH_LE)
  60 #endif
  61 #ifndef AUDIT_ARCH_X86_64
  62 #define AUDIT_ARCH_X86_64 (EM_X86_64|__AUDIT_ARCH_64BIT|__AUDIT_ARCH_LE)
  63 #endif
  64 #ifndef AUDIT_ARCH_MIPSEL
  65 #define AUDIT_ARCH_MIPSEL (EM_MIPS|__AUDIT_ARCH_LE)
  66 #endif
  67 #ifndef AUDIT_ARCH_AARCH64
  68 #define AUDIT_ARCH_AARCH64 (EM_AARCH64 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE)
  69 #endif
  70
  71 // For prctl.h
  72 #ifndef PR_SET_SECCOMP
  73 #define PR_SET_SECCOMP               22
  74 #define PR_GET_SECCOMP               21
  75 #endif
  76 #ifndef PR_SET_NO_NEW_PRIVS
  77 #define PR_SET_NO_NEW_PRIVS          38
  78 #define PR_GET_NO_NEW_PRIVS          39
  79 #endif
  80 #ifndef IPC_64
  81 #define IPC_64                   0x0100
  82 #endif
  83
  84 #ifndef BPF_MOD
  85 #define BPF_MOD                    0x90
  86 #endif
  87 #ifndef BPF_XOR
  88 #define BPF_XOR                    0xA0
  89 #endif
  90
  91 // In order to build will older tool chains, we currently have to avoid
  92 // including <linux/seccomp.h>. Until that can be fixed (if ever). Rely on
  93 // our own definitions of the seccomp kernel ABI.
  94 #ifndef SECCOMP_MODE_FILTER
  95 #define SECCOMP_MODE_DISABLED         0
  96 #define SECCOMP_MODE_STRICT           1
  97 #define SECCOMP_MODE_FILTER           2  // User user-supplied filter
  98 #endif
  99
 100 #ifndef SECCOMP_SET_MODE_STRICT
 101 #define SECCOMP_SET_MODE_STRICT 0
 102 #endif
 103 #ifndef SECCOMP_SET_MODE_FILTER
 104 #define SECCOMP_SET_MODE_FILTER 1
 105 #endif
 106 #ifndef SECCOMP_FILTER_FLAG_TSYNC
 107 #define SECCOMP_FILTER_FLAG_TSYNC 1
 108 #endif
 109
 110 #ifndef SECCOMP_RET_KILL
 111 // Return values supported for BPF filter programs. Please note that the
 112 // "illegal" SECCOMP_RET_INVALID is not supported by the kernel, should only
 113 // ever be used internally, and would result in the kernel killing our process.
 114 #define SECCOMP_RET_KILL    0x00000000U  // Kill the task immediately
 115 #define SECCOMP_RET_INVALID 0x00010000U  // Illegal return value
 116 #define SECCOMP_RET_TRAP    0x00030000U  // Disallow and force a SIGSYS
 117 #define SECCOMP_RET_ERRNO   0x00050000U  // Returns an errno
 118 #define SECCOMP_RET_TRACE   0x7ff00000U  // Pass to a tracer or disallow
 119 #define SECCOMP_RET_ALLOW   0x7fff0000U  // Allow
 120 #define SECCOMP_RET_ACTION  0xffff0000U  // Masks for the return value
 121 #define SECCOMP_RET_DATA    0x0000ffffU  //   sections
 122 #else
 123 #define SECCOMP_RET_INVALID 0x00010000U  // Illegal return value
 124 #endif
 125
 126 #ifndef SYS_SECCOMP
 127 #define SYS_SECCOMP                   1
 128 #endif
 129
 130 // Impose some reasonable maximum BPF program size. Realistically, the
 131 // kernel probably has much lower limits. But by limiting to less than
 132 // 30 bits, we can ease requirements on some of our data types.
 133 #define SECCOMP_MAX_PROGRAM_SIZE (1<<30)
 134
 135 #if defined(__i386__)
 136 #define MIN_SYSCALL         0u
 137 #define MAX_PUBLIC_SYSCALL  1024u
 138 #define MAX_SYSCALL         MAX_PUBLIC_SYSCALL
 139 #define SECCOMP_ARCH        AUDIT_ARCH_I386
 140
 141 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.gregs[(_reg)])
 142 #define SECCOMP_RESULT(_ctx)    SECCOMP_REG(_ctx, REG_EAX)
 143 #define SECCOMP_SYSCALL(_ctx)   SECCOMP_REG(_ctx, REG_EAX)
 144 #define SECCOMP_IP(_ctx)        SECCOMP_REG(_ctx, REG_EIP)
 145 #define SECCOMP_PARM1(_ctx)     SECCOMP_REG(_ctx, REG_EBX)
 146 #define SECCOMP_PARM2(_ctx)     SECCOMP_REG(_ctx, REG_ECX)
 147 #define SECCOMP_PARM3(_ctx)     SECCOMP_REG(_ctx, REG_EDX)
 148 #define SECCOMP_PARM4(_ctx)     SECCOMP_REG(_ctx, REG_ESI)
 149 #define SECCOMP_PARM5(_ctx)     SECCOMP_REG(_ctx, REG_EDI)
 150 #define SECCOMP_PARM6(_ctx)     SECCOMP_REG(_ctx, REG_EBP)
 151 #define SECCOMP_NR_IDX          (offsetof(struct arch_seccomp_data, nr))
 152 #define SECCOMP_ARCH_IDX        (offsetof(struct arch_seccomp_data, arch))
 153 #define SECCOMP_IP_MSB_IDX      (offsetof(struct arch_seccomp_data,           \
 154                                           instruction_pointer) + 4)
 155 #define SECCOMP_IP_LSB_IDX      (offsetof(struct arch_seccomp_data,           \
 156                                           instruction_pointer) + 0)
 157 #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 158                                  8*(nr) + 4)
 159 #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 160                                  8*(nr) + 0)
 161
 162
 163 #if defined(__BIONIC__)
 164 // Old Bionic versions don't have sys/user.h, so we just define regs_struct
 165 // directly.  This can be removed once we no longer need to support these old
 166 // Bionic versions.
 167 struct regs_struct {
 168   long int ebx;
 169   long int ecx;
 170   long int edx;
 171   long int esi;
 172   long int edi;
 173   long int ebp;
 174   long int eax;
 175   long int xds;
 176   long int xes;
 177   long int xfs;
 178   long int xgs;
 179   long int orig_eax;
 180   long int eip;
 181   long int xcs;
 182   long int eflags;
 183   long int esp;
 184   long int xss;
 185 };
 186 #else
 187 typedef user_regs_struct regs_struct;
 188 #endif
 189
 190 #define SECCOMP_PT_RESULT(_regs)  (_regs).eax
 191 #define SECCOMP_PT_SYSCALL(_regs) (_regs).orig_eax
 192 #define SECCOMP_PT_IP(_regs)      (_regs).eip
 193 #define SECCOMP_PT_PARM1(_regs)   (_regs).ebx
 194 #define SECCOMP_PT_PARM2(_regs)   (_regs).ecx
 195 #define SECCOMP_PT_PARM3(_regs)   (_regs).edx
 196 #define SECCOMP_PT_PARM4(_regs)   (_regs).esi
 197 #define SECCOMP_PT_PARM5(_regs)   (_regs).edi
 198 #define SECCOMP_PT_PARM6(_regs)   (_regs).ebp
 199
 200 #elif defined(__x86_64__)
 201 #define MIN_SYSCALL         0u
 202 #define MAX_PUBLIC_SYSCALL  1024u
 203 #define MAX_SYSCALL         MAX_PUBLIC_SYSCALL
 204 #define SECCOMP_ARCH        AUDIT_ARCH_X86_64
 205
 206 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.gregs[(_reg)])
 207 #define SECCOMP_RESULT(_ctx)    SECCOMP_REG(_ctx, REG_RAX)
 208 #define SECCOMP_SYSCALL(_ctx)   SECCOMP_REG(_ctx, REG_RAX)
 209 #define SECCOMP_IP(_ctx)        SECCOMP_REG(_ctx, REG_RIP)
 210 #define SECCOMP_PARM1(_ctx)     SECCOMP_REG(_ctx, REG_RDI)
 211 #define SECCOMP_PARM2(_ctx)     SECCOMP_REG(_ctx, REG_RSI)
 212 #define SECCOMP_PARM3(_ctx)     SECCOMP_REG(_ctx, REG_RDX)
 213 #define SECCOMP_PARM4(_ctx)     SECCOMP_REG(_ctx, REG_R10)
 214 #define SECCOMP_PARM5(_ctx)     SECCOMP_REG(_ctx, REG_R8)
 215 #define SECCOMP_PARM6(_ctx)     SECCOMP_REG(_ctx, REG_R9)
 216 #define SECCOMP_NR_IDX          (offsetof(struct arch_seccomp_data, nr))
 217 #define SECCOMP_ARCH_IDX        (offsetof(struct arch_seccomp_data, arch))
 218 #define SECCOMP_IP_MSB_IDX      (offsetof(struct arch_seccomp_data,           \
 219                                           instruction_pointer) + 4)
 220 #define SECCOMP_IP_LSB_IDX      (offsetof(struct arch_seccomp_data,           \
 221                                           instruction_pointer) + 0)
 222 #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 223                                  8*(nr) + 4)
 224 #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 225                                  8*(nr) + 0)
 226
 227 typedef user_regs_struct regs_struct;
 228 #define SECCOMP_PT_RESULT(_regs)  (_regs).rax
 229 #define SECCOMP_PT_SYSCALL(_regs) (_regs).orig_rax
 230 #define SECCOMP_PT_IP(_regs)      (_regs).rip
 231 #define SECCOMP_PT_PARM1(_regs)   (_regs).rdi
 232 #define SECCOMP_PT_PARM2(_regs)   (_regs).rsi
 233 #define SECCOMP_PT_PARM3(_regs)   (_regs).rdx
 234 #define SECCOMP_PT_PARM4(_regs)   (_regs).r10
 235 #define SECCOMP_PT_PARM5(_regs)   (_regs).r8
 236 #define SECCOMP_PT_PARM6(_regs)   (_regs).r9
 237
 238 #elif defined(__arm__) && (defined(__thumb__) || defined(__ARM_EABI__))
 239 // ARM EABI includes "ARM private" system calls starting at |__ARM_NR_BASE|,
 240 // and a "ghost syscall private to the kernel", cmpxchg,
 241 // at |__ARM_NR_BASE+0x00fff0|.
 242 // See </arch/arm/include/asm/unistd.h> in the Linux kernel.
 243 #define MIN_SYSCALL         ((unsigned int)__NR_SYSCALL_BASE)
 244 #define MAX_PUBLIC_SYSCALL  (MIN_SYSCALL + 1024u)
 245 #define MIN_PRIVATE_SYSCALL ((unsigned int)__ARM_NR_BASE)
 246 #define MAX_PRIVATE_SYSCALL (MIN_PRIVATE_SYSCALL + 16u)
 247 #define MIN_GHOST_SYSCALL   ((unsigned int)__ARM_NR_BASE + 0xfff0u)
 248 #define MAX_SYSCALL         (MIN_GHOST_SYSCALL + 4u)
 249
 250 #define SECCOMP_ARCH AUDIT_ARCH_ARM
 251
 252 // ARM sigcontext_t is different from i386/x86_64.
 253 // See </arch/arm/include/asm/sigcontext.h> in the Linux kernel.
 254 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.arm_##_reg)
 255 // ARM EABI syscall convention.
 256 #define SECCOMP_RESULT(_ctx)    SECCOMP_REG(_ctx, r0)
 257 #define SECCOMP_SYSCALL(_ctx)   SECCOMP_REG(_ctx, r7)
 258 #define SECCOMP_IP(_ctx)        SECCOMP_REG(_ctx, pc)
 259 #define SECCOMP_PARM1(_ctx)     SECCOMP_REG(_ctx, r0)
 260 #define SECCOMP_PARM2(_ctx)     SECCOMP_REG(_ctx, r1)
 261 #define SECCOMP_PARM3(_ctx)     SECCOMP_REG(_ctx, r2)
 262 #define SECCOMP_PARM4(_ctx)     SECCOMP_REG(_ctx, r3)
 263 #define SECCOMP_PARM5(_ctx)     SECCOMP_REG(_ctx, r4)
 264 #define SECCOMP_PARM6(_ctx)     SECCOMP_REG(_ctx, r5)
 265 #define SECCOMP_NR_IDX          (offsetof(struct arch_seccomp_data, nr))
 266 #define SECCOMP_ARCH_IDX        (offsetof(struct arch_seccomp_data, arch))
 267 #define SECCOMP_IP_MSB_IDX      (offsetof(struct arch_seccomp_data,           \
 268                                           instruction_pointer) + 4)
 269 #define SECCOMP_IP_LSB_IDX      (offsetof(struct arch_seccomp_data,           \
 270                                           instruction_pointer) + 0)
 271 #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 272                                  8*(nr) + 4)
 273 #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 274                                  8*(nr) + 0)
 275
 276 #if defined(__BIONIC__)
 277 // Old Bionic versions don't have sys/user.h, so we just define regs_struct
 278 // directly.  This can be removed once we no longer need to support these old
 279 // Bionic versions.
 280 struct regs_struct {
 281   unsigned long uregs[18];
 282 };
 283 #else
 284 typedef user_regs regs_struct;
 285 #endif
 286
 287 #define REG_cpsr    uregs[16]
 288 #define REG_pc      uregs[15]
 289 #define REG_lr      uregs[14]
 290 #define REG_sp      uregs[13]
 291 #define REG_ip      uregs[12]
 292 #define REG_fp      uregs[11]
 293 #define REG_r10     uregs[10]
 294 #define REG_r9      uregs[9]
 295 #define REG_r8      uregs[8]
 296 #define REG_r7      uregs[7]
 297 #define REG_r6      uregs[6]
 298 #define REG_r5      uregs[5]
 299 #define REG_r4      uregs[4]
 300 #define REG_r3      uregs[3]
 301 #define REG_r2      uregs[2]
 302 #define REG_r1      uregs[1]
 303 #define REG_r0      uregs[0]
 304 #define REG_ORIG_r0 uregs[17]
 305
 306 #define SECCOMP_PT_RESULT(_regs)  (_regs).REG_r0
 307 #define SECCOMP_PT_SYSCALL(_regs) (_regs).REG_r7
 308 #define SECCOMP_PT_IP(_regs)      (_regs).REG_pc
 309 #define SECCOMP_PT_PARM1(_regs)   (_regs).REG_r0
 310 #define SECCOMP_PT_PARM2(_regs)   (_regs).REG_r1
 311 #define SECCOMP_PT_PARM3(_regs)   (_regs).REG_r2
 312 #define SECCOMP_PT_PARM4(_regs)   (_regs).REG_r3
 313 #define SECCOMP_PT_PARM5(_regs)   (_regs).REG_r4
 314 #define SECCOMP_PT_PARM6(_regs)   (_regs).REG_r5
 315
 316 #elif defined(__mips__) && (_MIPS_SIM == _MIPS_SIM_ABI32)
 317 #define MIN_SYSCALL         __NR_O32_Linux
 318 #define MAX_PUBLIC_SYSCALL  (MIN_SYSCALL + __NR_Linux_syscalls)
 319 #define MAX_SYSCALL         MAX_PUBLIC_SYSCALL
 320 #define SECCOMP_ARCH        AUDIT_ARCH_MIPSEL
 321 #define SYSCALL_EIGHT_ARGS
 322 // MIPS sigcontext_t is different from i386/x86_64 and ARM.
 323 // See </arch/mips/include/uapi/asm/sigcontext.h> in the Linux kernel.
 324 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.gregs[_reg])
 325 // Based on MIPS o32 ABI syscall convention.
 326 // On MIPS, when indirect syscall is being made (syscall(__NR_foo)),
 327 // real identificator (__NR_foo) is not in v0, but in a0
 328 #define SECCOMP_RESULT(_ctx)    SECCOMP_REG(_ctx, 2)
 329 #define SECCOMP_SYSCALL(_ctx)   SECCOMP_REG(_ctx, 2)
 330 #define SECCOMP_IP(_ctx)        (_ctx)->uc_mcontext.pc
 331 #define SECCOMP_PARM1(_ctx)     SECCOMP_REG(_ctx, 4)
 332 #define SECCOMP_PARM2(_ctx)     SECCOMP_REG(_ctx, 5)
 333 #define SECCOMP_PARM3(_ctx)     SECCOMP_REG(_ctx, 6)
 334 #define SECCOMP_PARM4(_ctx)     SECCOMP_REG(_ctx, 7)
 335 // Only the first 4 arguments of syscall are in registers.
 336 // The rest are on the stack.
 337 #define SECCOMP_STACKPARM(_ctx, n)  (((long *)SECCOMP_REG(_ctx, 29))[(n)])
 338 #define SECCOMP_PARM5(_ctx)         SECCOMP_STACKPARM(_ctx, 4)
 339 #define SECCOMP_PARM6(_ctx)         SECCOMP_STACKPARM(_ctx, 5)
 340 #define SECCOMP_PARM7(_ctx)         SECCOMP_STACKPARM(_ctx, 6)
 341 #define SECCOMP_PARM8(_ctx)         SECCOMP_STACKPARM(_ctx, 7)
 342 #define SECCOMP_NR_IDX          (offsetof(struct arch_seccomp_data, nr))
 343 #define SECCOMP_ARCH_IDX        (offsetof(struct arch_seccomp_data, arch))
 344 #define SECCOMP_IP_MSB_IDX      (offsetof(struct arch_seccomp_data,           \
 345                                           instruction_pointer) + 4)
 346 #define SECCOMP_IP_LSB_IDX      (offsetof(struct arch_seccomp_data,           \
 347                                           instruction_pointer) + 0)
 348 #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 349                                  8*(nr) + 4)
 350 #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) +   \
 351                                  8*(nr) + 0)
 352
 353 // On Mips we don't have structures like user_regs or user_regs_struct in
 354 // sys/user.h that we could use, so we just define regs_struct directly.
 355 struct regs_struct {
 356   unsigned long long regs[32];
 357 };
 358
 359 #define REG_a3 regs[7]
 360 #define REG_a2 regs[6]
 361 #define REG_a1 regs[5]
 362 #define REG_a0 regs[4]
 363 #define REG_v1 regs[3]
 364 #define REG_v0 regs[2]
 365
 366 #define SECCOMP_PT_RESULT(_regs)  (_regs).REG_v0
 367 #define SECCOMP_PT_SYSCALL(_regs) (_regs).REG_v0
 368 #define SECCOMP_PT_PARM1(_regs)   (_regs).REG_a0
 369 #define SECCOMP_PT_PARM2(_regs)   (_regs).REG_a1
 370 #define SECCOMP_PT_PARM3(_regs)   (_regs).REG_a2
 371 #define SECCOMP_PT_PARM4(_regs)   (_regs).REG_a3
 372
 373 #elif defined(__aarch64__)
 374 struct regs_struct {
 375   unsigned long long regs[31];
 376   unsigned long long sp;
 377   unsigned long long pc;
 378   unsigned long long pstate;
 379 };
 380
 381 #define MIN_SYSCALL 0u
 382 #define MAX_PUBLIC_SYSCALL 279u
 383 #define MAX_SYSCALL MAX_PUBLIC_SYSCALL
 384 #define SECCOMP_ARCH AUDIT_ARCH_AARCH64
 385
 386 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.regs[_reg])
 387
 388 #define SECCOMP_RESULT(_ctx) SECCOMP_REG(_ctx, 0)
 389 #define SECCOMP_SYSCALL(_ctx) SECCOMP_REG(_ctx, 8)
 390 #define SECCOMP_IP(_ctx) (_ctx)->uc_mcontext.pc
 391 #define SECCOMP_PARM1(_ctx) SECCOMP_REG(_ctx, 0)
 392 #define SECCOMP_PARM2(_ctx) SECCOMP_REG(_ctx, 1)
 393 #define SECCOMP_PARM3(_ctx) SECCOMP_REG(_ctx, 2)
 394 #define SECCOMP_PARM4(_ctx) SECCOMP_REG(_ctx, 3)
 395 #define SECCOMP_PARM5(_ctx) SECCOMP_REG(_ctx, 4)
 396 #define SECCOMP_PARM6(_ctx) SECCOMP_REG(_ctx, 5)
 397
 398 #define SECCOMP_NR_IDX (offsetof(struct arch_seccomp_data, nr))
 399 #define SECCOMP_ARCH_IDX (offsetof(struct arch_seccomp_data, arch))
 400 #define SECCOMP_IP_MSB_IDX \
 401   (offsetof(struct arch_seccomp_data, instruction_pointer) + 4)
 402 #define SECCOMP_IP_LSB_IDX \
 403   (offsetof(struct arch_seccomp_data, instruction_pointer) + 0)
 404 #define SECCOMP_ARG_MSB_IDX(nr) \
 405   (offsetof(struct arch_seccomp_data, args) + 8 * (nr) + 4)
 406 #define SECCOMP_ARG_LSB_IDX(nr) \
 407   (offsetof(struct arch_seccomp_data, args) + 8 * (nr) + 0)
 408
 409 #define SECCOMP_PT_RESULT(_regs) (_regs).regs[0]
 410 #define SECCOMP_PT_SYSCALL(_regs) (_regs).regs[8]
 411 #define SECCOMP_PT_IP(_regs) (_regs).pc
 412 #define SECCOMP_PT_PARM1(_regs) (_regs).regs[0]
 413 #define SECCOMP_PT_PARM2(_regs) (_regs).regs[1]
 414 #define SECCOMP_PT_PARM3(_regs) (_regs).regs[2]
 415 #define SECCOMP_PT_PARM4(_regs) (_regs).regs[3]
 416 #define SECCOMP_PT_PARM5(_regs) (_regs).regs[4]
 417 #define SECCOMP_PT_PARM6(_regs) (_regs).regs[5]
 418 #else
 419 #error Unsupported target platform
 420
 421 #endif
 422
 423 #endif  // SANDBOX_LINUX_SECCOMP_BPF_LINUX_SECCOMP_H__