I am writing a program that creates BPF seccomp filters. These filters are supposed to check syscalls and their arguments against predefined allowed values. The logic to check the syscall by its number works as expected. However, the logic to filter the syscall arguments does not.
For debug purposes, is it possible to dump the input data of the filter program (seccomp_data) to see what it saw when it attempted to filter the syscall?
If that is not possible, is there another way to debug a raw BPF seccomp filter?
I know that libseccomp exists but this is an independent implementation.