diff options
| author |  netblue <netblue@debian> | 2022-01-21 10:13:22 -0500 |
|---|---|---|
| committer | netblue <netblue@debian> | 2022-01-21 10:13:22 -0500 |
| commit | 39654d01661ea9310b9b886a572ee24b1e4c9cfb (patch) | |
| tree | 88c9787f0cbb50e2c237ade62c89f8dccc5da9f2 /src/fseccomp | |
| parent | allow apostrophe in whitelist/blacklist ( #4614) (diff) | |
| download | firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.tar.gz firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.tar.zst firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.zip | |
adding netlink to --protocol list (#4605)
Diffstat (limited to 'src/fseccomp')
| -rw-r--r-- | src/fseccomp/protocol.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/fseccomp/protocol.c b/src/fseccomp/protocol.c index 25742c173..b072f6ad6 100644 --- a/src/fseccomp/protocol.c +++ b/src/fseccomp/protocol.c | |||
| @@ -58,6 +58,7 @@ static char *protocol[] = { | |||
| 58 | "netlink", | 58 | "netlink", |
| 59 | "packet", | 59 | "packet", |
| 60 | "bluetooth", | 60 | "bluetooth", |
| 61 | "netlink", | ||
| 61 | NULL | 62 | NULL |
| 62 | }; | 63 | }; |
| 63 | 64 | ||
| @@ -68,7 +69,8 @@ static struct sock_filter protocol_filter_command[] = { | |||
| 68 | WHITELIST(AF_INET6), | 69 | WHITELIST(AF_INET6), |
| 69 | WHITELIST(AF_NETLINK), | 70 | WHITELIST(AF_NETLINK), |
| 70 | WHITELIST(AF_PACKET), | 71 | WHITELIST(AF_PACKET), |
| 71 | WHITELIST(AF_BLUETOOTH) | 72 | WHITELIST(AF_BLUETOOTH), |
| 73 | WHITELIST(AF_NETLINK) | ||
| 72 | }; | 74 | }; |
| 73 | #endif | 75 | #endif |
| 74 | // Note: protocol[] and protocol_filter_command are synchronized | 76 | // Note: protocol[] and protocol_filter_command are synchronized |