Lines Matching refs:bpf

28 import bpf
49                 self.arch, kill_action=bpf.KillProcess())
54                 kill_action=bpf.KillProcess())
76                 bpf.SockFilter(bpf.BPF_LD | bpf.BPF_W | bpf.BPF_ABS, 0, 0,
77                                bpf.arg_offset(0, True)),
79                 bpf.SockFilter(bpf.BPF_JMP | bpf.BPF_JEQ | bpf.BPF_K, 0, 2, 0),
80                 bpf.SockFilter(bpf.BPF_LD | bpf.BPF_W | bpf.BPF_ABS, 0, 0,
81                                bpf.arg_offset(0, False)),
83                 bpf.SockFilter(bpf.BPF_JMP | bpf.BPF_JEQ | bpf.BPF_K, 1, 0,
85                 bpf.SockFilter(bpf.BPF_RET, 0, 0,
86                                bpf.SECCOMP_RET_KILL_PROCESS),
87                 bpf.SockFilter(bpf.BPF_RET, 0, 0, bpf.SECCOMP_RET_ALLOW),
344             kill_action=bpf.KillProcess())
346             bpf.simulate(program.instructions, self.arch.arch_nr,
348             bpf.simulate(program.instructions, self.arch.arch_nr,
370                 kill_action=bpf.KillProcess())
372                 bpf.simulate(program.instructions, self.arch.arch_nr,
374                 bpf.simulate(program.instructions, self.arch.arch_nr,
378                 bpf.simulate(program.instructions, self.arch.arch_nr,
381                 bpf.simulate(program.instructions, self.arch.arch_nr,
395                 kill_action=bpf.KillProcess())
397                 bpf.simulate(program.instructions, self.arch.arch_nr,
423                     kill_action=bpf.KillProcess())
428                         bpf.simulate(program.instructions, self.arch.arch_nr,
458             kill_action=bpf.KillProcess())
463                 bpf.simulate(program.instructions, self.arch.arch_nr,
467                 bpf.simulate(program.instructions, self.arch.arch_nr,
494             kill_action=bpf.KillProcess())
497                 bpf.simulate(program.instructions,
501                 bpf.simulate(program.instructions, self.arch.arch_nr,