diff options
| author |  netblue30 <netblue30@yahoo.com> | 2017-08-30 09:41:46 -0400 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2017-08-30 09:41:46 -0400 |
| commit | a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d (patch) | |
| tree | 929288955846ace3d0a6c73c3a1a4fceb1653879 /src | |
| parent | starting 0.9.50~rc2 (diff) | |
| download | firejail-a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d.tar.gz firejail-a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d.tar.zst firejail-a93f00cc8e0e3f24a6ea2cbf4beb5572357a4c3d.zip | |
tentative fix for Debian cross-platform build
Diffstat (limited to 'src')
| -rw-r--r-- | src/fseccomp/seccomp.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c index 8abc249ec..7262bc2ca 100644 --- a/src/fseccomp/seccomp.c +++ b/src/fseccomp/seccomp.c | |||
| @@ -203,12 +203,12 @@ void memory_deny_write_execute(const char *fname) { | |||
| 203 | 203 | ||
| 204 | // build filter | 204 | // build filter |
| 205 | static const struct sock_filter filter[] = { | 205 | static const struct sock_filter filter[] = { |
| 206 | #ifndef __x86_64__ | 206 | #ifdef __i386__ |
| 207 | // block old multiplexing mmap syscall for i386 | 207 | // block old multiplexing mmap syscall for i386 |
| 208 | BLACKLIST(SYS_mmap), | 208 | BLACKLIST(SYS_mmap), |
| 209 | #endif | 209 | #endif |
| 210 | // block mmap(,,x|PROT_WRITE|PROT_EXEC) so W&X memory can't be created | 210 | // block mmap(,,x|PROT_WRITE|PROT_EXEC) so W&X memory can't be created |
| 211 | #ifndef __x86_64__ | 211 | #ifdef __i386__ |
| 212 | // mmap2 is used for mmap on i386 these days | 212 | // mmap2 is used for mmap on i386 these days |
| 213 | BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_mmap2, 0, 5), | 213 | BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_mmap2, 0, 5), |
| 214 | #else | 214 | #else |