Lines Matching refs:bpf

28 import bpf
49                 self.arch, kill_action=bpf.KillProcess())
54                 kill_action=bpf.KillProcess())
76                 bpf.SockFilter(bpf.BPF_LD | bpf.BPF_W | bpf.BPF_ABS, 0, 0,
77                                bpf.arg_offset(0, True)),
79                 bpf.SockFilter(bpf.BPF_JMP | bpf.BPF_JEQ | bpf.BPF_K, 0, 2, 0),
80                 bpf.SockFilter(bpf.BPF_LD | bpf.BPF_W | bpf.BPF_ABS, 0, 0,
81                                bpf.arg_offset(0, False)),
83                 bpf.SockFilter(bpf.BPF_JMP | bpf.BPF_JEQ | bpf.BPF_K, 1, 0,
85                 bpf.SockFilter(bpf.BPF_RET, 0, 0,
86                                bpf.SECCOMP_RET_KILL_PROCESS),
87                 bpf.SockFilter(bpf.BPF_RET, 0, 0, bpf.SECCOMP_RET_ALLOW),
336             kill_action=bpf.KillProcess())
338             bpf.simulate(program.instructions, self.arch.arch_nr,
340             bpf.simulate(program.instructions, self.arch.arch_nr,
362                 kill_action=bpf.KillProcess())
364                 bpf.simulate(program.instructions, self.arch.arch_nr,
366                 bpf.simulate(program.instructions, self.arch.arch_nr,
370                 bpf.simulate(program.instructions, self.arch.arch_nr,
373                 bpf.simulate(program.instructions, self.arch.arch_nr,
387                 kill_action=bpf.KillProcess())
389                 bpf.simulate(program.instructions, self.arch.arch_nr,
415                     kill_action=bpf.KillProcess())
420                         bpf.simulate(program.instructions, self.arch.arch_nr,
450             kill_action=bpf.KillProcess())
455                 bpf.simulate(program.instructions, self.arch.arch_nr,
459                 bpf.simulate(program.instructions, self.arch.arch_nr,
486             kill_action=bpf.KillProcess())
489                 bpf.simulate(program.instructions,
493                 bpf.simulate(program.instructions, self.arch.arch_nr,