Lines Matching refs:calls
7 …calls can be opened to user-mode programs without any restrictions. However, not all of these syst…
13 …mic policy library. During startup of a user-mode process, Seccomp system calls are invoked to loa…
33 …- If a process needs to use system calls in the baseline blocklist, the system calls must be decla…
42 To meet product security requirements, you can enable Seccomp to limit the scope of system calls th…
104 …ed with the strict mode. Only the read, write, exit, and sigreturn system calls are allowed.<br>- …
115 1. Collect statistics on the system calls required by the 32-bit and 64-bit systems by using the st…
169 …he following information is reported, the process needs to use the system calls in the baseline bl…
186 3. If the process is not terminated, comment out the system calls (for example, **setuid**) related…
258 …call baseline blocklist for system processes, that is, the list of system calls that cannot be inv…
260 …baseline blocklist for application processes, that is, the list of system calls that cannot be inv…
263 …ivileged process policy file. If certain processes need to use the system calls on the baseline bl…
271 - Separate system calls from the system architecture by a semicolon (;). The value **all** indicate…
280 | priority | Allowlist of frequently used system calls. | System calls on the list are treated …
281 | priorityWithArgs | Allowlist of frequently used system calls with arguments. | System calls o…
282 | allowList | Allowlist | List of system calls that can be invoked by a process. |
283 | allowListWithArgs | List of system calls with arguments that can be invoked by a process. | S…
284 …locklist of system calls. | Before generating BPF instructions during policy file parsing, the sy…
326 - Separate system calls from the system architecture by a semicolon (;). The value **all** indicate…
354 … <div style="width: 100pt">Statistics collection is supported for system calls in abnormal branch…
355 …calls are recorded into logs. Collect the logs after the trace is complete, and use a script to pa…
356 …calls and records audit log information containing the system call numbers into kernel logs. Colle…
434 …| --target-cpu | CPU architecture, that is, the architecture for which system calls are collect…
596 …The value **1** indicates the compatibility mode, that is, the arm64 kernel uses arm system calls.|
618 …calls](#system-call-statistic-methods), multiple policy files may be generated. In these policy fi…