Revert "seccomp: make do_resolve_add_rule() more strict"

This reverts commit dfddc8aa. Closes #2376. Signed-off-by: 's avatarChristian Brauner <christian.brauner@ubuntu.com>
parent 06b44d05
...@@ -500,12 +500,14 @@ bool do_resolve_add_rule(uint32_t arch, char *line, scmp_filter_ctx ctx, ...@@ -500,12 +500,14 @@ bool do_resolve_add_rule(uint32_t arch, char *line, scmp_filter_ctx ctx,
nr = seccomp_syscall_resolve_name(line); nr = seccomp_syscall_resolve_name(line);
if (nr == __NR_SCMP_ERROR) { if (nr == __NR_SCMP_ERROR) {
WARN("Failed to resolve syscall \"%s\"", line); WARN("Failed to resolve syscall \"%s\"", line);
return false; WARN("This syscall will NOT be blacklisted");
return true;
} }
if (nr < 0) { if (nr < 0) {
WARN("Got negative return value %d for syscall \"%s\"", nr, line); WARN("Got negative return value %d for syscall \"%s\"", nr, line);
return false; WARN("This syscall will NOT be blacklisted");
return true;
} }
memset(&arg_cmp, 0, sizeof(arg_cmp)); memset(&arg_cmp, 0, sizeof(arg_cmp));
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment