Add AUDIT_ARCH_* constants from linux/audit.h

Architecture identification constants for seccomp BPF filters.

https://github.com/torvalds/linux/blob/master/include/uapi/linux/audit.h#L389-L451

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: fullzer4

libc-test/build.rs

@@ -4127,6 +4127,7 @@ fn test_linux(target: &str) {
         headers!(
             cfg,
             (gnu, "linux/aio_abi.h"),
+            "linux/audit.h",
             "linux/can.h",
             "linux/can/bcm.h",
             "linux/can/error.h",

libc-test/semver/linux.txt

@@ -192,6 +192,59 @@ AT_SYMLINK_FOLLOW
 AT_SYMLINK_NOFOLLOW
 AT_SYSINFO_EHDR
 AT_UID
+AUDIT_ARCH_AARCH64
+AUDIT_ARCH_ALPHA
+AUDIT_ARCH_ARCOMPACT
+AUDIT_ARCH_ARCOMPACTBE
+AUDIT_ARCH_ARCV2
+AUDIT_ARCH_ARCV2BE
+AUDIT_ARCH_ARM
+AUDIT_ARCH_ARMEB
+AUDIT_ARCH_C6X
+AUDIT_ARCH_C6XBE
+AUDIT_ARCH_CRIS
+AUDIT_ARCH_CSKY
+AUDIT_ARCH_FRV
+AUDIT_ARCH_H8300
+AUDIT_ARCH_HEXAGON
+AUDIT_ARCH_I386
+AUDIT_ARCH_IA64
+AUDIT_ARCH_LOONGARCH32
+AUDIT_ARCH_LOONGARCH64
+AUDIT_ARCH_M32R
+AUDIT_ARCH_M68K
+AUDIT_ARCH_MICROBLAZE
+AUDIT_ARCH_MIPS
+AUDIT_ARCH_MIPS64
+AUDIT_ARCH_MIPS64N32
+AUDIT_ARCH_MIPSEL
+AUDIT_ARCH_MIPSEL64
+AUDIT_ARCH_MIPSEL64N32
+AUDIT_ARCH_NDS32
+AUDIT_ARCH_NDS32BE
+AUDIT_ARCH_NIOS2
+AUDIT_ARCH_OPENRISC
+AUDIT_ARCH_PARISC
+AUDIT_ARCH_PARISC64
+AUDIT_ARCH_PPC
+AUDIT_ARCH_PPC64
+AUDIT_ARCH_PPC64LE
+AUDIT_ARCH_RISCV32
+AUDIT_ARCH_RISCV64
+AUDIT_ARCH_S390
+AUDIT_ARCH_S390X
+AUDIT_ARCH_SH
+AUDIT_ARCH_SH64
+AUDIT_ARCH_SHEL
+AUDIT_ARCH_SHEL64
+AUDIT_ARCH_SPARC
+AUDIT_ARCH_SPARC64
+AUDIT_ARCH_TILEGX
+AUDIT_ARCH_TILEGX32
+AUDIT_ARCH_TILEPRO
+AUDIT_ARCH_UNICORE
+AUDIT_ARCH_X86_64
+AUDIT_ARCH_XTENSA
 B1000000
 B1152000
 B1500000
@@ -3996,6 +4049,10 @@ _SC_XOPEN_XCU_VERSION
 _SC_XOPEN_XPG2
 _SC_XOPEN_XPG3
 _SC_XOPEN_XPG4
+__AUDIT_ARCH_64BIT
+__AUDIT_ARCH_CONVENTION_MASK
+__AUDIT_ARCH_CONVENTION_MIPS64_N32
+__AUDIT_ARCH_LE
 __SIZEOF_PTHREAD_BARRIERATTR_T
 __SIZEOF_PTHREAD_BARRIER_T
 __SIZEOF_PTHREAD_CONDATTR_T

src/new/linux_uapi/linux/audit.rs

@@ -0,0 +1,63 @@
+//! Header: `uapi/linux/audit.h`
+//!
+//! <https://github.com/torvalds/linux/blob/master/include/uapi/linux/audit.h>
+
+pub const __AUDIT_ARCH_64BIT: u32 = 1 << 31;
+pub const __AUDIT_ARCH_LE: u32 = 1 << 30;
+pub const __AUDIT_ARCH_CONVENTION_MASK: u32 = 0x30000000;
+pub const __AUDIT_ARCH_CONVENTION_MIPS64_N32: u32 = 1 << 29;
+
+pub const AUDIT_ARCH_AARCH64: u32 = 183 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_ALPHA: u32 = 0x9026 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_ARCOMPACT: u32 = 93 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_ARCOMPACTBE: u32 = 93;
+pub const AUDIT_ARCH_ARCV2: u32 = 195 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_ARCV2BE: u32 = 195;
+pub const AUDIT_ARCH_ARM: u32 = 40 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_ARMEB: u32 = 40;
+pub const AUDIT_ARCH_C6X: u32 = 140 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_C6XBE: u32 = 140;
+pub const AUDIT_ARCH_CRIS: u32 = 76 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_CSKY: u32 = 252 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_FRV: u32 = 0x5441;
+pub const AUDIT_ARCH_H8300: u32 = 46;
+pub const AUDIT_ARCH_HEXAGON: u32 = 164;
+pub const AUDIT_ARCH_I386: u32 = 3 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_IA64: u32 = 50 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_M32R: u32 = 88;
+pub const AUDIT_ARCH_M68K: u32 = 4;
+pub const AUDIT_ARCH_MICROBLAZE: u32 = 189;
+pub const AUDIT_ARCH_MIPS: u32 = 8;
+pub const AUDIT_ARCH_MIPSEL: u32 = 8 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_MIPS64: u32 = 8 | __AUDIT_ARCH_64BIT;
+pub const AUDIT_ARCH_MIPS64N32: u32 = 8 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_CONVENTION_MIPS64_N32;
+pub const AUDIT_ARCH_MIPSEL64: u32 = 8 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_MIPSEL64N32: u32 =
+    8 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE | __AUDIT_ARCH_CONVENTION_MIPS64_N32;
+pub const AUDIT_ARCH_NDS32: u32 = 167 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_NDS32BE: u32 = 167;
+pub const AUDIT_ARCH_NIOS2: u32 = 113 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_OPENRISC: u32 = 92;
+pub const AUDIT_ARCH_PARISC: u32 = 15;
+pub const AUDIT_ARCH_PARISC64: u32 = 15 | __AUDIT_ARCH_64BIT;
+pub const AUDIT_ARCH_PPC: u32 = 20;
+pub const AUDIT_ARCH_PPC64: u32 = 21 | __AUDIT_ARCH_64BIT;
+pub const AUDIT_ARCH_PPC64LE: u32 = 21 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_RISCV32: u32 = 243 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_RISCV64: u32 = 243 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_S390: u32 = 22;
+pub const AUDIT_ARCH_S390X: u32 = 22 | __AUDIT_ARCH_64BIT;
+pub const AUDIT_ARCH_SH: u32 = 42;
+pub const AUDIT_ARCH_SHEL: u32 = 42 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_SH64: u32 = 42 | __AUDIT_ARCH_64BIT;
+pub const AUDIT_ARCH_SHEL64: u32 = 42 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_SPARC: u32 = 2;
+pub const AUDIT_ARCH_SPARC64: u32 = 43 | __AUDIT_ARCH_64BIT;
+pub const AUDIT_ARCH_TILEGX: u32 = 191 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_TILEGX32: u32 = 191 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_TILEPRO: u32 = 188 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_UNICORE: u32 = 110 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_X86_64: u32 = 62 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_XTENSA: u32 = 94;
+pub const AUDIT_ARCH_LOONGARCH32: u32 = 258 | __AUDIT_ARCH_LE;
+pub const AUDIT_ARCH_LOONGARCH64: u32 = 258 | __AUDIT_ARCH_64BIT | __AUDIT_ARCH_LE;

src/new/linux_uapi/linux/mod.rs

@@ -2,6 +2,7 @@
 //!
 //! <https://github.com/torvalds/linux/tree/master/include/uapi/linux>
 
+pub(crate) mod audit;
 pub(crate) mod can;
 pub(crate) mod futex;
 pub(crate) mod if_link;

src/new/mod.rs

@@ -177,6 +177,7 @@ cfg_if! {
         pub use linux::types::*;
         pub use sys::socket::*;
     } else if #[cfg(target_os = "linux")] {
+        pub use linux::audit::*;
         pub use linux::can::bcm::*;
         pub use linux::can::error::*;
         pub use linux::can::j1939::*;