From: Mathieu Malaterre <mathieu.malaterre@gmail.com>
Date: Tue, 20 Mar 2018 15:08:20 +0000 (+0100)
Subject: seccomp: enable RestrictAddressFamilies on ppc (#8505)
X-Git-Tag: v239~522
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0d9fca76bb69e162265b2d25cb79f1890c0da31b;p=thirdparty%2Fsystemd.git

seccomp: enable RestrictAddressFamilies on ppc (#8505)

In commit da1921a5c3 ppc64/ppc64el were added as supported architectures for
socketcall() for the POWER family. Extend the support for the 32bits
architectures.
---

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 220658b3ad2..3691e73b847 100644
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -1182,6 +1182,7 @@ int seccomp_restrict_address_families(Set *address_families, bool whitelist) {
                 case SCMP_ARCH_X32:
                 case SCMP_ARCH_ARM:
                 case SCMP_ARCH_AARCH64:
+                case SCMP_ARCH_PPC:
                 case SCMP_ARCH_PPC64:
                 case SCMP_ARCH_PPC64LE:
                         /* These we know we support (i.e. are the ones that do not use socketcall()) */
@@ -1190,7 +1191,6 @@ int seccomp_restrict_address_families(Set *address_families, bool whitelist) {
 
                 case SCMP_ARCH_S390:
                 case SCMP_ARCH_S390X:
-                case SCMP_ARCH_PPC:
                 case SCMP_ARCH_X86:
                 default:
                         /* These we either know we don't support (i.e. are the ones that do use socketcall()), or we