Here we give the list of Linux syscalls and the sysmask masks acting on them, up to call number 269. Syscalls with higher numbers are masked by the mask "new".
Please note that many library functions are based on system calls. For example, fopen() uses open, printf() uses write, ftell() uses lseek, malloc() uses brk. The masking of a syscall will break EVERY library function that depends on it.
Name | Number | Hard masks | Partial masks |
---|---|---|---|
access | 33 | dread | |
acct | 51 | sysadm | |
adjtimex | 124 | sysadm, nonstd | |
alarm | 27 | signal | |
bdflush | 134 | nonstd, rootmisc | |
brk | 45 | brk | |
capget | 184 | sysmask | |
capset | 185 | sysmask | |
chdir | 12 | chdir | |
chmod | 15 | chmod | |
chown | 212 | rootmisc | |
chown16 | 182 | rootmisc | |
chroot | 61 | chroot | |
clock_getres | 266 | nonstd, rt | |
clock_gettime | 265 | nonstd, rt | |
clock_nanosleep | 267 | nonstd, rt | |
clock_settime | 264 | nonstd, rt | |
clone | 120 | fork | |
close | 6 | --- | |
creat | 8 | open | ropen, wopen, creat |
create_module | 127 | sysadm, nonstd | |
delete_module | 129 | sysadm, nonstd | |
dup | 41 | fmisc | |
dup2 | 63 | fmisc | |
epoll_create | 254 | nonstd, poll | |
epoll_ctl | 255 | nonstd, poll | |
epoll_wait | 256 | nonstd, poll | |
execve | 11 | execve | exec, suid |
exit | 1 | --- | |
exit_group | 252 | --- | |
fadvise64 | 250 | nonstd | |
fchdir | 133 | chdir | |
fchmod | 94 | chmod | |
fchown | 207 | rootmisc | |
fchown16 | 95 | rootmisc | |
fcntl | 55 | open, fmisc | |
fcntl64 | 221 | open, fmisc | |
fdatasync | 148 | fnoharm | |
fgetxattr | 231 | dread | |
flistxattr | 234 | dread | |
flock | 143 | fmisc | |
fork | 2 | fork | |
fremovexattr | 237 | chmod | |
fsetxattr | 228 | chmod | |
fstat | 28 | dread, obsolete | |
fstat64 | 197 | dread | |
fstatfs | 100 | fs | |
fstatfs64 | 269 | nonstd, fs | |
fsync | 118 | fnoharm | |
ftruncate | 93 | fmisc | |
ftruncate64 | 194 | fmisc | |
futex | 240 | nonstd | |
getcwd | 183 | dread | |
getdents | 141 | dread | |
getdents64 | 220 | dread | |
getegid | 202 | harmless | |
getegid16 | 50 | harmless | |
geteuid | 201 | harmless | |
geteuid16 | 49 | harmless | |
getgid | 200 | harmless | |
getgid16 | 47 | harmless | |
getgroups | 205 | harmless | |
getgroups16 | 80 | harmless | |
getitimer | 105 | rlim | |
get_kernel_syms | 130 | sysadm, nonstd | |
getpgid | 132 | spid | |
getpgrp | 65 | harmless | |
getpid | 20 | harmless | |
getppid | 64 | harmless | |
getpriority | 96 | rlim | |
getresgid | 211 | nonstd | |
getresgid16 | 171 | nonstd | |
getresuid | 209 | nonstd | |
getresuid16 | 165 | nonstd | |
getrlimit | 191 | rlim | |
getrusage | 77 | rlim | |
getsid | 147 | spid | |
get_thread_area | 244 | nonstd, misc | |
gettid | 224 | harmless | |
gettimeofday | 78 | harmless | |
getuid | 199 | harmless | |
getuid16 | 24 | harmless | |
getxattr | 229 | dread | |
init_module | 128 | sysadm, nonstd | |
io_cancel | 249 | nonstd, rt | |
ioctl | 54 | ioctl | |
io_destroy | 246 | nonstd, rt | |
io_getevents | 247 | nonstd, rt | |
ioperm | 101 | rootmisc, nonstd | |
iopl | 110 | rootmisc, nonstd | |
io_setup | 245 | nonstd, rt | |
io_submit | 248 | nonstd, rt | |
ipc | 117 | ipc | |
kill | 37 | kill | |
lchown | 198 | rootmisc | |
lchown16 | 16 | rootmisc | |
lgetxattr | 230 | dread | |
link | 9 | link | |
listxattr | 232 | dread | |
llistxattr | 233 | dread | |
llseek | 140 | fnoharm | |
lookup_dcookie | 253 | nonstd, dread | |
lremovexattr | 236 | chmod | |
lseek | 19 | fnoharm | |
lsetxattr | 227 | chmod | |
lstat | 84 | obsolete, dread | |
lstat64 | 196 | dread | |
madvise | 219 | rootmisc, nonstd | |
mincore | 218 | rootmisc, nonstd | |
mkdir | 39 | dir | |
mknod | 14 | mount | |
mlock | 150 | rootmisc | |
mlockall | 152 | rootmisc | |
mmap2 | 192 | mmap | |
modify_ldt | 123 | ldt | |
mount | 21 | mount | |
mprotect | 125 | misc, mmap | |
mremap | 163 | mmap, nonstd | |
msync | 144 | mmap, fnoharm | |
munlock | 151 | rootmisc | |
munlockall | 153 | rootmisc | |
munmap | 91 | mmap | |
nanosleep | 162 | harmless | |
newfstat | 108 | dread | |
newlstat | 107 | dread | |
newstat | 106 | dread | |
newuname | 122 | harmless | |
nfsservctl | 169 | sysadm, nonstd | |
nice | 34 | rlim | |
old_getrlimit | 76 | rlim | |
old_mmap | 90 | mmap | |
old_readdir | 89 | obsolete | |
old_select | 82 | poll | |
oldumount | 22 | mount | |
olduname | 59 | obsolete | |
open | 5 | open | ropen, wopen, dev, procfs, creat |
pause | 29 | harmless | |
personality | 136 | nonstd | |
pipe | 42 | fmisc | |
pivot_root | 217 | rootmisc, nonstd | |
poll | 168 | poll | |
prctl | 172 | nonstd, kill | |
pread64 | 180 | harmless | |
ptrace | 26 | misc | |
pwrite64 | 181 | harmless | |
query_module | 167 | sysadm, nonstd | |
quotactl | 131 | sysadm | |
read | 3 | --- | |
readahead | 225 | nonstd | |
readlink | 85 | dread | |
readv | 145 | harmless | |
reboot | 88 | rootmisc | |
remap_file_pages | 257 | nonstd, mmap | |
removexattr | 235 | chmod | |
rename | 38 | link | |
restart_syscall | 0 | new | |
rmdir | 40 | dir, erase | |
rt_sigaction | 174 | signal | |
rt_sigpending | 176 | signal | |
rt_sigprocmask | 175 | signal | |
rt_sigqueueinfo | 178 | signal | |
rt_sigreturn | 173 | signal | |
rt_sigsuspend | 179 | signal | |
rt_sigtimedwait | 177 | signal | |
sched_getaffinity | 242 | nonstd, rootmisc | |
sched_getparam | 155 | rootmisc | |
sched_get_priority_max | 159 | rlim | |
sched_get_priority_min | 160 | rlim | |
sched_getscheduler | 157 | rootmisc | |
sched_rr_get_interval | 161 | rootmisc | |
sched_setaffinity | 241 | nonstd, rootmisc | |
sched_setparam | 154 | rootmisc | |
sched_setscheduler | 156 | rootmisc | |
select | 142 | poll | |
sendfile | 187 | nonstd | |
sendfile64 | 239 | nonstd | |
setdomainname | 121 | sysadm, nonstd | |
setfsgid | 216 | nonstd | suid |
setfsgid16 | 139 | nonstd | suid |
setfsuid | 215 | nonstd | suid |
setfsuid16 | 138 | nonstd | suid |
setgid | 214 | --- | suid |
setgid16 | 46 | --- | suid |
setgroups | 206 | --- | suid |
setgroups16 | 81 | --- | suid |
sethostname | 74 | sysadm | |
setitimer | 104 | rlim | |
setpgid | 57 | spid | |
setpriority | 97 | rlim | |
setregid | 204 | --- | suid |
setregid16 | 71 | --- | suid |
setresgid | 210 | nonstd | |
setresgid16 | 170 | nonstd | |
setresuid | 208 | nonstd | |
setresuid16 | 164 | nonstd | |
setreuid | 203 | --- | suid |
setreuid16 | 70 | --- | suid |
setrlimit | 75 | rlim | |
setsid | 66 | spid | |
set_thread_area | 243 | nonstd, misc | |
set_tid_address | 258 | nonstd | |
settimeofday | 79 | sysadm | |
setuid | 213 | --- | suid |
setuid16 | 23 | --- | suid |
setxattr | 226 | chmod | |
sgetmask | 68 | signal | |
sigaction | 67 | signal | |
sigaltstack | 186 | signal, nonstd | |
signal | 48 | signal | |
sigpending | 73 | signal | |
sigprocmask | 126 | signal | |
sigreturn | 119 | signal | |
sigsuspend | 72 | signal | |
socketcall | 102 | socketcall | sockopen, socknet, sockop |
ssetmask | 69 | signal | |
stat | 18 | obsolete, dread | |
stat64 | 195 | dread | |
statfs | 99 | fs | |
statfs64 | 268 | nonstd, fs | |
stime | 25 | sysadm | |
swapoff | 115 | mount | |
swapon | 87 | mount | |
symlink | 83 | link | |
sync | 36 | fnoharm | |
sysctl | 149 | sysadm, nonstd | |
sysfs | 135 | fs | |
sysinfo | 116 | nonstd | |
syslog | 103 | rootmisc | |
time | 13 | harmless | |
timer_create | 259 | nonstd, rt | |
timer_delete | 263 | nonstd, rt | |
timer_getoverrun | 262 | nonstd, rt | |
timer_gettime | 261 | nonstd, rt | |
timer_settime | 260 | nonstd, rt | |
times | 43 | harmless | |
tkill | 238 | kill, nonstd | |
truncate | 92 | erase | |
truncate64 | 193 | erase | |
umask | 60 | chmod | |
umount | 52 | mount | |
uname | 109 | obsolete | |
unlink | 10 | erase | |
uselib | 86 | obsolete | |
ustat | 62 | fs | |
utime | 30 | chmod | |
vfork | 190 | fork | |
vhangup | 111 | rootmisc, nonstd | |
vm86 | 166 | nonstd | |
vm86old | 113 | obsolete | |
wait4 | 114 | fork | |
waitpid | 7 | fork | |
write | 4 | --- | |
writev | 146 | harmless | |
yield | 158 | rlim |