diff options
author | netblue <netblue@debian> | 2022-01-21 10:13:22 -0500 |
---|---|---|
committer | netblue <netblue@debian> | 2022-01-21 10:13:22 -0500 |
commit | 39654d01661ea9310b9b886a572ee24b1e4c9cfb (patch) | |
tree | 88c9787f0cbb50e2c237ade62c89f8dccc5da9f2 /src/fseccomp | |
parent | allow apostrophe in whitelist/blacklist ( #4614) (diff) | |
download | firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.tar.gz firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.tar.zst firejail-39654d01661ea9310b9b886a572ee24b1e4c9cfb.zip |
adding netlink to --protocol list (#4605)
Diffstat (limited to 'src/fseccomp')
-rw-r--r-- | src/fseccomp/protocol.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/fseccomp/protocol.c b/src/fseccomp/protocol.c index 25742c173..b072f6ad6 100644 --- a/src/fseccomp/protocol.c +++ b/src/fseccomp/protocol.c | |||
@@ -58,6 +58,7 @@ static char *protocol[] = { | |||
58 | "netlink", | 58 | "netlink", |
59 | "packet", | 59 | "packet", |
60 | "bluetooth", | 60 | "bluetooth", |
61 | "netlink", | ||
61 | NULL | 62 | NULL |
62 | }; | 63 | }; |
63 | 64 | ||
@@ -68,7 +69,8 @@ static struct sock_filter protocol_filter_command[] = { | |||
68 | WHITELIST(AF_INET6), | 69 | WHITELIST(AF_INET6), |
69 | WHITELIST(AF_NETLINK), | 70 | WHITELIST(AF_NETLINK), |
70 | WHITELIST(AF_PACKET), | 71 | WHITELIST(AF_PACKET), |
71 | WHITELIST(AF_BLUETOOTH) | 72 | WHITELIST(AF_BLUETOOTH), |
73 | WHITELIST(AF_NETLINK) | ||
72 | }; | 74 | }; |
73 | #endif | 75 | #endif |
74 | // Note: protocol[] and protocol_filter_command are synchronized | 76 | // Note: protocol[] and protocol_filter_command are synchronized |