seccomp: error on unrecognized actions

Be more strict about unrecognized actions. Previously the parser would happily accept lines with typos like: kexec_load errrno 1 (note the extra 'r') Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

seccomp: error on unrecognized actions
7474b5b3 · Wolfgang Bumiller · 9dbd8ff3 · 7474b5b3
Commit 7474b5b3 authored May 25, 2018 by Wolfgang Bumiller
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

seccomp.c src/lxc/seccomp.c +3 -0

No files found.
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -114,6 +114,9 @@ static uint32_t get_v2_default_action(char *line)
 		ret_action = SCMP_ACT_ALLOW;
 	} else if (strncmp(line, "trap", 4) == 0) {
 		ret_action = SCMP_ACT_TRAP;
+	} else if (line[0]) {
+		ERROR("Unrecognized seccomp action: %s", line);
+		return -2;
 	}
 	return ret_action;