]> git.ipfire.org Git - thirdparty/lldpd.git/commit
daemon: add additional syscalls to SECCOMP filter when running in the foreground
authorDavid Sastre Medina <d.sastre.medina@gmail.com>
Tue, 11 Jan 2022 13:55:05 +0000 (14:55 +0100)
committerVincent Bernat <vincent@bernat.ch>
Tue, 11 Jan 2022 18:25:21 +0000 (19:25 +0100)
commit1def824404cfcab9f64b687da1cb7a4b4b51bbe0
treec3f516ddec119bbca42c2e3872f9ca6dce5f3a8f
parent0ea4b1a5e0e9c35d960145d25166e92a9990227f
daemon: add additional syscalls to SECCOMP filter when running in the foreground

Running lldpd in the foreground as follows:

strace -c /usr/sbin/lldpd -d -cfse -D -C lldpd-peer -I lldpd-peer \
       -S lldpd-system-name -m 192.168.50.6

Requires additional syscalls to be filtered (non relevant syscalls removed):

% time     seconds  usecs/call     calls    errors syscall
------ ----------- ----------- --------- --------- ----------------
  0.47    0.000026           6         4           ppoll
  0.33    0.000018           3         5           rt_sigprocmask
  0.27    0.000015           3         4           getsockopt
------ ----------- ----------- --------- --------- ----------------
100.00    0.005520           8       637        22 total
src/daemon/priv-seccomp.c