]> git.ipfire.org Git - thirdparty/systemd.git/commit
seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default
authorNick Rosbrook <enr0n@ubuntu.com>
Mon, 23 Feb 2026 20:25:27 +0000 (15:25 -0500)
committerLuca Boccassi <luca.boccassi@gmail.com>
Fri, 27 Feb 2026 21:57:05 +0000 (21:57 +0000)
commitf3a64e2c396deaecd1a574fb13b615830231f36b
tree05ec2158f8cf6c71c80b2c20456862d5019dcd1e
parentc5a92a85b2d814f0f5642d6beda4a6271ad2e6de
seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default

These syscalls are part of a newer kernel API to replace interaction
with /proc/self/attr, with the goal of allowing LSM stacking. These are
being used now by e.g. libapparmor, so should be more easily available
to services using seccomp filtering.

(cherry picked from commit 7a1888954c4a4666150a59125c2e6c92277bb4e2)
(cherry picked from commit 515816197e8155c3ddc4ab2092d23744509c37ea)
(cherry picked from commit 75cbe81bba6eb9fa9e8ad6a4937658aec6680f11)
src/shared/seccomp-util.c