diff options
Diffstat (limited to 'src/fseccomp')
-rw-r--r-- | src/fseccomp/seccomp.c | 10 | ||||
-rw-r--r-- | src/fseccomp/seccomp_secondary.c | 8 |
2 files changed, 13 insertions, 5 deletions
diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c index 7d2ccbbce..a30a9e00b 100644 --- a/src/fseccomp/seccomp.c +++ b/src/fseccomp/seccomp.c | |||
@@ -162,9 +162,13 @@ static void add_default_list(int fd, int allow_debuggers) { | |||
162 | #ifdef SYS_mbind | 162 | #ifdef SYS_mbind |
163 | filter_add_blacklist(fd, SYS_mbind, 0); | 163 | filter_add_blacklist(fd, SYS_mbind, 0); |
164 | #endif | 164 | #endif |
165 | #ifdef SYS_get_mempolicy | 165 | |
166 | filter_add_blacklist(fd, SYS_get_mempolicy, 0); | 166 | // breaking Firefox nightly when playing youtube videos |
167 | #endif | 167 | // TODO: test again when firefox sandbox is finally released |
168 | //#ifdef SYS_get_mempolicy | ||
169 | // filter_add_blacklist(fd, SYS_get_mempolicy, 0); | ||
170 | //#endif | ||
171 | |||
168 | #ifdef SYS_set_mempolicy | 172 | #ifdef SYS_set_mempolicy |
169 | filter_add_blacklist(fd, SYS_set_mempolicy, 0); | 173 | filter_add_blacklist(fd, SYS_set_mempolicy, 0); |
170 | #endif | 174 | #endif |
diff --git a/src/fseccomp/seccomp_secondary.c b/src/fseccomp/seccomp_secondary.c index 8270b7018..fceb2c3ec 100644 --- a/src/fseccomp/seccomp_secondary.c +++ b/src/fseccomp/seccomp_secondary.c | |||
@@ -67,7 +67,9 @@ void seccomp_secondary_64(const char *fname) { | |||
67 | BLACKLIST(210), // io_cancel | 67 | BLACKLIST(210), // io_cancel |
68 | BLACKLIST(216), // remap_file_pages | 68 | BLACKLIST(216), // remap_file_pages |
69 | BLACKLIST(237), // mbind | 69 | BLACKLIST(237), // mbind |
70 | BLACKLIST(239), // get_mempolicy | 70 | // breaking Firefox nightly when playing youtube videos |
71 | // TODO: test again when firefox sandbox is finally released | ||
72 | // BLACKLIST(239), // get_mempolicy | ||
71 | BLACKLIST(238), // set_mempolicy | 73 | BLACKLIST(238), // set_mempolicy |
72 | BLACKLIST(256), // migrate_pages | 74 | BLACKLIST(256), // migrate_pages |
73 | BLACKLIST(279), // move_pages | 75 | BLACKLIST(279), // move_pages |
@@ -148,7 +150,9 @@ void seccomp_secondary_32(const char *fname) { | |||
148 | BLACKLIST(249), // io_cancel | 150 | BLACKLIST(249), // io_cancel |
149 | BLACKLIST(257), // remap_file_pages | 151 | BLACKLIST(257), // remap_file_pages |
150 | BLACKLIST(274), // mbind | 152 | BLACKLIST(274), // mbind |
151 | BLACKLIST(275), // get_mempolicy | 153 | // breaking Firefox nightly when playing youtube videos |
154 | // TODO: test again when firefox sandbox is finally released | ||
155 | // BLACKLIST(275), // get_mempolicy | ||
152 | BLACKLIST(276), // set_mempolicy | 156 | BLACKLIST(276), // set_mempolicy |
153 | BLACKLIST(294), // migrate_pages | 157 | BLACKLIST(294), // migrate_pages |
154 | BLACKLIST(317), // move_pages | 158 | BLACKLIST(317), // move_pages |