Unverified Commit 7b2352c7 by Stéphane Graber Committed by GitHub

Merge pull request #2378 from brauner/2018-06-05/revert_seccomp_strict

Revert "seccomp: make do_resolve_add_rule() more strict"
parents 1716351a 8c26014b
...@@ -500,12 +500,14 @@ bool do_resolve_add_rule(uint32_t arch, char *line, scmp_filter_ctx ctx, ...@@ -500,12 +500,14 @@ bool do_resolve_add_rule(uint32_t arch, char *line, scmp_filter_ctx ctx,
nr = seccomp_syscall_resolve_name(line); nr = seccomp_syscall_resolve_name(line);
if (nr == __NR_SCMP_ERROR) { if (nr == __NR_SCMP_ERROR) {
WARN("Failed to resolve syscall \"%s\"", line); WARN("Failed to resolve syscall \"%s\"", line);
return false; WARN("This syscall will NOT be handled by seccomp");
return true;
} }
if (nr < 0) { if (nr < 0) {
WARN("Got negative return value %d for syscall \"%s\"", nr, line); WARN("Got negative return value %d for syscall \"%s\"", nr, line);
return false; WARN("This syscall will NOT be handled by seccomp");
return true;
} }
memset(&arg_cmp, 0, sizeof(arg_cmp)); memset(&arg_cmp, 0, sizeof(arg_cmp));
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment