diff options
author | netblue30 <netblue30@yahoo.com> | 2017-08-30 09:41:46 -0400 |
---|---|---|
committer | netblue30 <netblue30@yahoo.com> | 2017-08-30 09:41:46 -0400 |
commit | a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d (patch) | |
tree | 929288955846ace3d0a6c73c3a1a4fceb1653879 /src/fseccomp/seccomp.c | |
parent | starting 0.9.50~rc2 (diff) | |
download | firejail-a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d.tar.gz firejail-a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d.tar.zst firejail-a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d.zip |
tentative fix for Debian cross-platform build
Diffstat (limited to 'src/fseccomp/seccomp.c')
-rw-r--r-- | src/fseccomp/seccomp.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c index 8abc249ec..7262bc2ca 100644 --- a/src/fseccomp/seccomp.c +++ b/src/fseccomp/seccomp.c | |||
@@ -203,12 +203,12 @@ void memory_deny_write_execute(const char *fname) { | |||
203 | 203 | ||
204 | // build filter | 204 | // build filter |
205 | static const struct sock_filter filter[] = { | 205 | static const struct sock_filter filter[] = { |
206 | #ifndef __x86_64__ | 206 | #ifdef __i386__ |
207 | // block old multiplexing mmap syscall for i386 | 207 | // block old multiplexing mmap syscall for i386 |
208 | BLACKLIST(SYS_mmap), | 208 | BLACKLIST(SYS_mmap), |
209 | #endif | 209 | #endif |
210 | // block mmap(,,x|PROT_WRITE|PROT_EXEC) so W&X memory can't be created | 210 | // block mmap(,,x|PROT_WRITE|PROT_EXEC) so W&X memory can't be created |
211 | #ifndef __x86_64__ | 211 | #ifdef __i386__ |
212 | // mmap2 is used for mmap on i386 these days | 212 | // mmap2 is used for mmap on i386 these days |
213 | BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_mmap2, 0, 5), | 213 | BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_mmap2, 0, 5), |
214 | #else | 214 | #else |