seccomp_is_const_allow(9)
β¨ NAME β¨
okay bestie, this is seccomp_is_const_allow(9) from the Kernel API Manual β and its whole job is literally to check if filter is constant allow with given data. That's the vibe. That's the tweet. π
π§ SYNOPSIS π§
Here's the exact signature, no edits, no crumbs:
bool seccomp_is_const_allow (struct sock_fprog_kern *fprog , struct
seccomp_data *sd );
π ARGUMENTS π
fprogβ the BPF programs. Yep, that's the filter-program situation you're handing over. π«Άsdβ the seccomp data to check against. Important little detail: only the syscall number and arch number are considered constant. iykyk. β
π SEE ALSO π
Kernel file ./kernel/seccomp.c, plus this whole friend group of references β all present and accounted for, bestie:
struct seccomp_kaddfd(9)struct notification(9)struct action_cache(9)struct seccomp_filter(9)seccomp_check_filter(9)seccomp_cache_check_allow(9)seccomp_run_filters(9)seccomp_can_sync_threads(9)seccomp_filter_release(9)seccomp_sync_threads(9)seccomp_prepare_filter(9)seccomp_prepare_user_filter(9)seccomp_cache_prepare(9)seccomp_attach_filter(9)seccomp_set_mode_strict(9)seccomp_set_mode_filter(9)prctl_set_seccomp(9)
mwah π source/version: ./kernel Β· date: October 2026 Β· manual name: seccomp_is_const_allow(9). That's the footer energy, but make it cute. πΈ
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms