]> git.ipfire.org Git - thirdparty/systemd.git/commit
seccomp: also check the mode parameter of `fchmodat2(2)` 29618/head
authorArseny Maslennikov <arseny@altlinux.org>
Sun, 15 Oct 2023 08:00:00 +0000 (11:00 +0300)
committerArseny Maslennikov <arseny@altlinux.org>
Thu, 19 Oct 2023 12:53:58 +0000 (15:53 +0300)
commit8b45281daa3a87b4b7a3248263cd0ba929d15596
tree3d55d32da42639e6d8bfe86d020235329a3ed804
parent6e10405aa25fe5e76b740d9ec59730e3f4470c7a
seccomp: also check the mode parameter of `fchmodat2(2)`

If there is no libseccomp support, just ban the entire syscall instead
so wrappers will fall back to older, supported syscalls.
Also reflect all of this in `test-seccomp.c`.
src/shared/seccomp-util.c
src/test/test-seccomp.c