def deny
import bend-osdev-bpf@0.1.0.0/LAWS.bend as LAWSimport Base
import bend-osdev-bpf@0.1.0.0/insn.bend as I
import bend-osdev-bpf@0.1.0.0/seccomp.bend as S
262# ERRNO(e) for system call nr, ALLOW for the others
263def deny(nr: U32, e: U32) -> List<&2, I.BpfOp>:
264 [I.BpfLdAbs{I.BpfW{}, 0}, I.BpfJmp{I.BpfJeq{}, I.BpfK{nr}, 0, 1}, I.BpfRet{I.BpfRetK{S.SeccompAction.to_u32(S.SeccompErrno{e})}}, I.BpfRet{I.BpfRetK{S.SeccompAction.to_u32(S.SeccompAllow{})}}]