Allow exceptions to seccomp lists

Prefix ! can be used to make exceptions to system call blacklists and
whitelists used by seccomp, seccomp.drop and seccomp.keep.

Closes #1366

1 files changed, 2 insertions, 0 deletions

diff --git a/src/fseccomp/fseccomp.h b/src/fseccomp/fseccomp.h
index 593963e76..e1579d098 100644
--- a/src/fseccomp/fseccomp.h
+++ b/src/fseccomp/fseccomp.h
@@ -52,7 +52,9 @@ void seccomp_secondary_block(const char *fname);
 void write_to_file(int fd, const void *data, int size);
 void filter_init(int fd);
 void filter_add_whitelist(int fd, int syscall, int arg, void *ptrarg);
+void filter_add_whitelist_for_excluded(int fd, int syscall, int arg, void *ptrarg);
 void filter_add_blacklist(int fd, int syscall, int arg, void *ptrarg);
+void filter_add_blacklist_for_excluded(int fd, int syscall, int arg, void *ptrarg);
 void filter_add_errno(int fd, int syscall, int arg, void *ptrarg);
 void filter_end_blacklist(int fd);
 void filter_end_whitelist(int fd);