]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
analyze-security: do not assign badness to filtered-out syscalls
authorZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Sat, 1 Aug 2020 09:28:09 +0000 (11:28 +0200)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Sat, 1 Aug 2020 09:54:26 +0000 (11:54 +0200)
Fixes #16451, https://bugzilla.redhat.com/show_bug.cgi?id=1856273.

src/analyze/analyze-security.c

index d4996c3c6552f477d5c5d80241ffb651373dbfef..5356dafbb86347823e8bb792d9aa98fd39b794fb 100644 (file)
@@ -566,7 +566,7 @@ static int assess_system_call_filter(
                                 b = 10;
                         } else {
                                 (void) asprintf(&d, "System call deny list defined for service, and %s is included", f->name);
-                                b = 5;
+                                b = 0;
                         }
                 }
         }