From 06b0f6d323c396ca1df000af96fdd07cc69b06e0 Mon Sep 17 00:00:00 2001 From: Alice Frosi Date: Thu, 23 Mar 2023 17:06:00 +0100 Subject: filter: add logging mode The logging mode creates a BPF filter where all the syscalls trigger a notification to the seccomp notifier. --- filter.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'filter.h') diff --git a/filter.h b/filter.h index 134a16b..ee5ab12 100644 --- a/filter.h +++ b/filter.h @@ -34,6 +34,6 @@ unsigned int right_child(unsigned int parent_index); unsigned int create_bfp_program(struct syscall_entry table[], struct sock_filter filter[], unsigned int n_syscall); -int convert_bpf(char *file, struct bpf_call *entries, int n); +int convert_bpf(char *file, struct bpf_call *entries, int n, bool log); #endif -- cgit v1.2.3