seccomp: logging

Allow `log` as an alternative seccomp error action instead of killing
or returning an errno code.

Signed-off-by: Topi Miettinen <toiwoton@gmail.com>

1 files changed, 2 insertions, 0 deletions

diff --git a/src/firejail/profile.c b/src/firejail/profile.c
index 70acd8a2a..970033899 100644
--- a/src/firejail/profile.c
+++ b/src/firejail/profile.c
@@ -991,6 +991,8 @@ int profile_check_line(char *ptr, int lineno, const char *fname) {
                         if (config_seccomp_error_action == -1) {
                                 if (strcmp(ptr + 21, "kill") == 0)
                                         arg_seccomp_error_action = SECCOMP_RET_KILL;
+                                else if (strcmp(ptr + 21, "log") == 0)
+                                        arg_seccomp_error_action = SECCOMP_RET_LOG;
                                 else {
                                         arg_seccomp_error_action = errno_find_name(ptr + 21);
                                         if (arg_seccomp_error_action == -1)