]> git.ipfire.org Git - thirdparty/systemd.git/commit
seccomp: make sure getrlimit() is among the default permitted syscalls
authorLennart Poettering <lennart@poettering.net>
Wed, 17 Aug 2016 15:53:25 +0000 (17:53 +0200)
committerLennart Poettering <lennart@poettering.net>
Mon, 22 Aug 2016 12:17:23 +0000 (14:17 +0200)
commit4a4485ae69bddf6cc01d4c50f3f53535c2d8fea4
tree8efe7c12615a3a5ca0952f97ea30bd6b1424b1b6
parent05b4d3b55c0a60aa17817d51129f2bc83914c1f4
seccomp: make sure getrlimit() is among the default permitted syscalls

A lot of basic code wants to know the stack size, and it is safe if they do,
hence let's permit getrlimit() (but not setrlimit()) by default.

See: #3970
src/shared/seccomp-util.c