syscall.sh / x64 / seccomp

seccomp

operate on Secure Computing state of the process

sys_seccomp(unsigned int op, unsigned int flags, void *uargs)
number317 (0x13d)
abicommon
entry pointsys_seccomp
sinceLinux 3.17
man pageseccomp(2)
sourceelixir.bootlin.com

Registers

registervalue
rax317, the syscall number
rdiunsigned int op
rsiunsigned int flags
rdxvoid *uargs
raxthe return value

Then run syscall to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/seccomp