From 7feb54dd0d600c625bb561b70b10a223bfd8280a Mon Sep 17 00:00:00 2001 From: aoand Date: Mon, 26 Aug 2019 20:33:36 +0300 Subject: seccomp fix: allow numeric syscalls as per man page, numeric syscall is indicated by the dollar sign '$' --- src/firejail/seccomp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/firejail/seccomp.c b/src/firejail/seccomp.c index 81ab18aa1..310ccf83f 100644 --- a/src/firejail/seccomp.c +++ b/src/firejail/seccomp.c @@ -48,7 +48,8 @@ char *seccomp_check_list(const char *str) { const char *ptr1 = str; char *ptr2 = rv; while (*ptr1 != '\0') { - if (isalnum(*ptr1) || *ptr1 == '_' || *ptr1 == ',' || *ptr1 == ':' || *ptr1 == '@' || *ptr1 == '-') + if (isalnum(*ptr1) || *ptr1 == '_' || *ptr1 == ',' || *ptr1 == ':' + || *ptr1 == '@' || *ptr1 == '-' || *ptr1 == '$') *ptr2++ = *ptr1++; else { fprintf(stderr, "Error: invalid syscall list\n"); -- cgit v1.2.3-70-g09d2