Index: sandbox/linux/services/syscall_wrappers.h |
diff --git a/sandbox/linux/services/syscall_wrappers.h b/sandbox/linux/services/syscall_wrappers.h |
index 03d5cdf8891ab2697590d27fb97f09fb5a96e244..15ec81bf3e828ec03758ba4e4dd2056cb25424e8 100644 |
--- a/sandbox/linux/services/syscall_wrappers.h |
+++ b/sandbox/linux/services/syscall_wrappers.h |
@@ -9,6 +9,8 @@ |
#include "sandbox/sandbox_export.h" |
+struct sock_fprog; |
+ |
namespace sandbox { |
// Provide direct system call wrappers for a few common system calls. |
@@ -30,6 +32,12 @@ SANDBOX_EXPORT long sys_clone(unsigned long flags, |
SANDBOX_EXPORT void sys_exit_group(int status); |
+// The official system call takes |args| as void* (in order to be extensible), |
+// but add more typing for the cases that are currently used. |
+SANDBOX_EXPORT int sys_seccomp(unsigned int operation, |
+ unsigned int flags, |
+ const struct sock_fprog* args); |
+ |
} // namespace sandbox |
#endif // SANDBOX_LINUX_SERVICES_SYSCALL_WRAPPERS_H_ |