projects / emacs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 75d9fbe) | patch
Fix Seccomp filter for newer GNU/Linux systems (Bug#51073).
authorPhilipp Stephani <phst@google.com>
Sat, 9 Oct 2021 17:39:31 +0000 (19:39 +0200)
committerPhilipp Stephani <phst@google.com>
Sat, 9 Oct 2021 17:39:31 +0000 (19:39 +0200)
commitb497add9719dac16696f64d5a551d2b813f0c825
tree2f1318216462ae7b660ed12b802320fbeecf1c37tree | snapshot
parent75d9fbec8853c2040bbb0d5a447894cca86b9df9commit | diff
Fix Seccomp filter for newer GNU/Linux systems (Bug#51073).

On some systems, process startup calls prctl(PR_CAPBSET_READ) via
'cap_get_bound'.  We can just return EINVAL.

* lib-src/seccomp-filter.c (main): Add a rule for
prctl(PR_CAPBSET_READ, ...).
lib-src/seccomp-filter.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.