From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 27 Dec 2016 13:28:19 +0000 (+0100)
Subject: seccomp: move bdflush() system call to @obsolete filter group
X-Git-Tag: v233~227^2~2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=802fa07a4ad5b29a798896f1566c5e2f85897767;p=thirdparty%2Fsystemd.git

seccomp: move bdflush() system call to @obsolete filter group

The system call is obsolete after all.
---

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 3c0dafe41ec..5972d8e3e07 100644
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -469,6 +469,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 .value =
                 "_sysctl\0"
                 "afs_syscall\0"
+                "bdflush\0"
                 "break\0"
                 "create_module\0"
                 "ftime\0"
@@ -500,7 +501,6 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "@module\0"
                 "@raw-io\0"
                 "acct\0"
-                "bdflush\0"
                 "bpf\0"
                 "capset\0"
                 "chown32\0"