#include <stdlib.h>
#include <errno.h>
#ifndef __GLIBC__
#pragma push_macro("fstatat64")
#undef fstatat64
#endif
#define DENY_RULE(call) \
do \
if (seccomp_rule_add (ctx, SCMP_ACT_KILL, SCMP_SYS(call), 0) == -1) \
return -1;
}
#pragma pop_macro("fstatat64")