Lines Matching full:arch
27 import arch
32 ARCH_64 = arch.Arch.load_from_json(
41 self.arch = ARCH_64
42 self.compiler = compiler.PolicyCompiler(self.arch)
49 self.arch, kill_action=bpf.KillProcess())
61 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
64 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
109 block.simulate(self.arch.arch_nr,
110 self.arch.syscalls['read'],
118 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
121 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
124 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
127 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
130 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
133 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
136 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
139 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
142 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
152 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
155 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
158 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
161 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
164 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
167 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
170 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
173 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
176 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
181 if self.arch.bits == 32:
211 long_block.simulate(self.arch.arch_nr,
212 self.arch.syscalls['read'],
216 self.arch.arch_nr, self.arch.syscalls['read'],
224 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'], 0,
227 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'], 0,
230 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'], 1,
233 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'], 1,
241 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
249 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
252 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
255 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
263 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
271 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
279 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
287 block.simulate(self.arch.arch_nr, self.arch.syscalls['read'],
299 block.simulate(self.arch.arch_nr,
300 self.arch.syscalls['read'], prot)[1],
304 block.simulate(self.arch.arch_nr,
305 self.arch.syscalls['read'], prot)[1],
313 self.arch = ARCH_64
314 self.compiler = compiler.PolicyCompiler(self.arch)
346 bpf.simulate(program.instructions, self.arch.arch_nr,
347 self.arch.syscalls['read'], 0)[0],
348 bpf.simulate(program.instructions, self.arch.arch_nr,
349 self.arch.syscalls['close'], 0)[0],
372 bpf.simulate(program.instructions, self.arch.arch_nr,
373 self.arch.syscalls['read'], 0)[0],
374 bpf.simulate(program.instructions, self.arch.arch_nr,
375 self.arch.syscalls['close'], 0)[0],
378 bpf.simulate(program.instructions, self.arch.arch_nr,
379 self.arch.syscalls['read'], 0)[1], 'ALLOW')
381 bpf.simulate(program.instructions, self.arch.arch_nr,
382 self.arch.syscalls['close'], 0)[1], 'ALLOW')
397 bpf.simulate(program.instructions, self.arch.arch_nr,
398 self.arch.syscalls['read'], 0)[1], 'KILL_THREAD')
407 random.sample(self.arch.syscalls.keys(), num_entries),
424 for name, number in self.arch.syscalls.items():
428 bpf.simulate(program.instructions, self.arch.arch_nr,
446 syscalls = dict(random.sample(self.arch.syscalls.items(), num_entries))
459 for name, number in self.arch.syscalls.items():
463 bpf.simulate(program.instructions, self.arch.arch_nr,
464 self.arch.syscalls[name], number)[1],
467 bpf.simulate(program.instructions, self.arch.arch_nr,
468 self.arch.syscalls[name], number + 1)[1],
482 for name in random.sample(self.arch.syscalls.keys(), num_entries):
498 self.arch.arch_nr, self.arch.syscalls[name],
501 bpf.simulate(program.instructions, self.arch.arch_nr,
502 self.arch.syscalls[name], 1025)[1],