diff options
Diffstat (limited to 'src/fseccomp/seccomp.c')
-rw-r--r-- | src/fseccomp/seccomp.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c index 8abc249ec..7262bc2ca 100644 --- a/src/fseccomp/seccomp.c +++ b/src/fseccomp/seccomp.c | |||
@@ -203,12 +203,12 @@ void memory_deny_write_execute(const char *fname) { | |||
203 | 203 | ||
204 | // build filter | 204 | // build filter |
205 | static const struct sock_filter filter[] = { | 205 | static const struct sock_filter filter[] = { |
206 | #ifndef __x86_64__ | 206 | #ifdef __i386__ |
207 | // block old multiplexing mmap syscall for i386 | 207 | // block old multiplexing mmap syscall for i386 |
208 | BLACKLIST(SYS_mmap), | 208 | BLACKLIST(SYS_mmap), |
209 | #endif | 209 | #endif |
210 | // block mmap(,,x|PROT_WRITE|PROT_EXEC) so W&X memory can't be created | 210 | // block mmap(,,x|PROT_WRITE|PROT_EXEC) so W&X memory can't be created |
211 | #ifndef __x86_64__ | 211 | #ifdef __i386__ |
212 | // mmap2 is used for mmap on i386 these days | 212 | // mmap2 is used for mmap on i386 these days |
213 | BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_mmap2, 0, 5), | 213 | BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_mmap2, 0, 5), |
214 | #else | 214 | #else |