aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--src/firejail/seccomp.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/firejail/seccomp.c b/src/firejail/seccomp.c
index 72a5874f8..15379215c 100644
--- a/src/firejail/seccomp.c
+++ b/src/firejail/seccomp.c
@@ -68,7 +68,7 @@ int seccomp_load(const char *fname) {
68 goto errexit; 68 goto errexit;
69 unsigned short entries = (unsigned short) size / (unsigned short) sizeof(struct sock_filter); 69 unsigned short entries = (unsigned short) size / (unsigned short) sizeof(struct sock_filter);
70 if (arg_debug) 70 if (arg_debug)
71 printf("reading %d seccomp entries from %s\n", entries, fname); 71 printf("configuring %d seccomp entries from %s\n", entries, fname);
72 72
73 // read filter 73 // read filter
74 struct sock_filter *filter = malloc(size); 74 struct sock_filter *filter = malloc(size);
@@ -205,6 +205,8 @@ int seccomp_filter_keep(void) {
205 printf("seccomp filter configured\n"); 205 printf("seccomp filter configured\n");
206 206
207 207
208 if (arg_debug && access(PATH_FSECCOMP, X_OK) == 0)
209 sbox_run(SBOX_ROOT | SBOX_SECCOMP, 3, PATH_FSECCOMP, "print", RUN_SECCOMP_CFG);
208 return seccomp_load(RUN_SECCOMP_CFG); 210 return seccomp_load(RUN_SECCOMP_CFG);
209} 211}
210 212