Compile will take a parsed policy and generate an optimized sock filter for that policy The policy is assumed to have been unified and simplified before compilation starts - no unresolved variables or calls should exist in the policy.

allow */.

returns an errno */.

kill the task immediately */.

pass to a tracer or disallow */.

disallow and force a SIGSYS */.