[systemd-devel] [PATCH] shared: add statx(2) to @file-system syscall filter list

[Lennart Poettering]

On Sa, 02.09.17 19:47, Cristian Rodríguez (crrodriguez at opensuse.org) wrote:

> ---
>  src/shared/seccomp-util.c | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
> index 29eb2b17d..0857f5907 100644
> --- a/src/shared/seccomp-util.c
> +++ b/src/shared/seccomp-util.c
> @@ -403,6 +403,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
>                  "stat64\0"
>                  "stat\0"
>                  "statfs\0"
> +                "statx\0"
>                  "symlink\0"
>                  "symlinkat\0"
>                  "truncate64\0"

I created a github PR from this:

https://github.com/systemd/systemd/pull/6738

Let's continue discussions about this patch there.

Lennart

-- 
Lennart Poettering, Red Hat