commit 26f57b6b24dbee56f2604062bd49e34a1ea2249b
author Paul Lawrence <paullawrence@google.com> Mon Mar 27 15:38:37 2017 -0700
committer Paul Lawrence <paullawrence@google.com> Mon Mar 27 15:51:50 2017 -0700
tree 76728f1efedfa09d29cbc357b61779d8f6dad5f5
parent 840ae69408c9b6ca269bce4657b9696cc6720918

Expose seccomp table

Test: Run with internal cl
      https://googleplex-android-review.git.corp.google.com/#/c/2028102/
      and make sure passes
Bug: 20890063
Change-Id: Id78e5ea843554a5d3750b8f9b350f28ad4dca99b

libc/seccomp/include/seccomp_policy.h

diff --git a/libc/seccomp/include/seccomp_policy.h b/libc/seccomp/include/seccomp_policy.h
index 33b5d0e..397f8e4 100644
--- a/libc/seccomp/include/seccomp_policy.h
+++ b/libc/seccomp/include/seccomp_policy.h
@@ -17,6 +17,10 @@
 #ifndef SECCOMP_POLICY_H
 #define SECCOMP_POLICY_H
 
+#include <stddef.h>
+#include <linux/filter.h>
+
 bool set_seccomp_filter();
+void get_seccomp_filter(const sock_filter*& filter, size_t& filter_size);
 
 #endif

libc/seccomp/seccomp_policy.cpp

diff --git a/libc/seccomp/seccomp_policy.cpp b/libc/seccomp/seccomp_policy.cpp
index d93ae1e..fd2179b 100644
--- a/libc/seccomp/seccomp_policy.cpp
+++ b/libc/seccomp/seccomp_policy.cpp
@@ -18,7 +18,6 @@
 
 #include <assert.h>
 #include <linux/audit.h>
-#include <linux/filter.h>
 #include <linux/seccomp.h>
 #include <sys/prctl.h>
 
@@ -154,3 +153,13 @@
 
     return install_filter(f);
 }
+
+void get_seccomp_filter(const sock_filter*& filter, size_t& filter_size) {
+#if defined __aarch64__ || defined __x86_64__ || defined __mips64__
+    filter = primary_filter;
+    filter_size = primary_filter_size;
+#else
+    filter = secondary_filter;
+    filter_size = secondary_filter_size;
+#endif
+}