Skip to content

L
lxc
Unverified Commit 7241d0f4 by Ruben Jenster Committed by Christian Brauner
Options

seccomp: Check if syscall is supported on compat architecture.

Signed-off-by: 's avatarRuben Jenster <r.jenster@drachenfels.de>
parent 9b43bce0
Showing with 5 additions and 0 deletions
src/lxc/seccomp.c
...@@ -531,6 +531,11 @@ static bool do_resolve_add_rule(uint32_t arch, char *line, scmp_filter_ctx ctx, ...@@ -531,6 +531,11 @@ static bool do_resolve_add_rule(uint32_t arch, char *line, scmp_filter_ctx ctx,
return true; return true;
} }
if (arch != SCMP_ARCH_NATIVE && seccomp_syscall_resolve_name_arch(arch, line) < 0) {
INFO("The syscall \"%s\" nr:%d is not supported on compat arch:%d", line, nr, arch);
return true;
}
memset(&arg_cmp, 0, sizeof(arg_cmp)); memset(&arg_cmp, 0, sizeof(arg_cmp));
for (i = 0; i < rule->args_num; i++) { for (i = 0; i < rule->args_num; i++) {
INFO("arg_cmp[%d]: SCMP_CMP(%u, %llu, %llu, %llu)", i, INFO("arg_cmp[%d]: SCMP_CMP(%u, %llu, %llu, %llu)", i,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment