From a3f00edb32aca7516d690db046dd1ed3eb186bdd Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 9 May 2022 10:23:52 -0400 Subject: always log seccomp errors (#5110) --- src/libpostexecseccomp/libpostexecseccomp.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/libpostexecseccomp') diff --git a/src/libpostexecseccomp/libpostexecseccomp.c b/src/libpostexecseccomp/libpostexecseccomp.c index e2339547e..c8f1fb3fb 100644 --- a/src/libpostexecseccomp/libpostexecseccomp.c +++ b/src/libpostexecseccomp/libpostexecseccomp.c @@ -55,6 +55,10 @@ static void load_seccomp(void) { }; prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0); +#ifdef SECCOMP_FILTER_FLAG_LOG + syscall(SYS_seccomp, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_LOG, &prog); +#else prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog); +#endif munmap(filter, size); } -- cgit v1.2.3-54-g00ecf