Mercurial > hg > dhcpcd
changeset 5464:4a1e66b07201 draft
privsep: Avoid "unconfined" seccomp warnings
Unsure why these are needed atm....
| author | Roy Marples <roy@marples.name> |
|---|---|
| date | Sun, 20 Sep 2020 00:53:47 +0100 |
| parents | f23587f4e8e2 |
| children | afa6f810f693 |
| files | src/privsep-linux.c |
| diffstat | 1 files changed, 16 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/src/privsep-linux.c Sun Sep 20 00:43:36 2020 +0100 +++ b/src/privsep-linux.c Sun Sep 20 00:53:47 2020 +0100 @@ -243,6 +243,22 @@ #ifdef __NR_uname SECCOMP_ALLOW(__NR_uname), #endif + + /* Avoid unconfined dmesg warnings. + * XXX Why do we need these? */ +#ifdef __NR_exit_group + SECCOMP_ALLOW(__NR_exit_group), +#endif +#ifdef __NR_ftruncate + SECCOMP_ALLOW(__NR_ftruncate), +#endif +#ifdef __NR_munmap + SECCOMP_ALLOW(__NR_munmap), +#endif +#ifdef __NR_unlink + SECCOMP_ALLOW(__NR_unlink), +#endif + /* Deny everything else */ BPF_STMT(BPF_RET + BPF_K, SECCOMP_FILTER_FAIL), };