Skip to content

L
lxc
Unverified Commit ec49d30f by Christian Brauner
Options

seccomp: send notify fd as part of the message

Since we haven't made this official api yet: YOLO Signed-off-by: 's avatarChristian Brauner <christian.brauner@ubuntu.com>
parent 21405769
Showing with 3 additions and 3 deletions
src/lxc/seccomp.c
...@@ -1357,7 +1357,7 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data, ...@@ -1357,7 +1357,7 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data,
__do_close int fd_mem = -EBADF; __do_close int fd_mem = -EBADF;
int ret; int ret;
ssize_t bytes; ssize_t bytes;
int send_fd_list[2]; int send_fd_list[3];
struct iovec iov[4]; struct iovec iov[4];
size_t iov_len, msg_base_size, msg_full_size; size_t iov_len, msg_base_size, msg_full_size;
char mem_path[6 /* /proc/ */ char mem_path[6 /* /proc/ */
...@@ -1460,10 +1460,10 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data, ...@@ -1460,10 +1460,10 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data,
send_fd_list[0] = fd_pid; send_fd_list[0] = fd_pid;
send_fd_list[1] = fd_mem; send_fd_list[1] = fd_mem;
send_fd_list[2] = fd;
retry: retry:
bytes = lxc_abstract_unix_send_fds_iov(listener_proxy_fd, send_fd_list, bytes = lxc_abstract_unix_send_fds_iov(listener_proxy_fd, send_fd_list, 3, iov, iov_len);
2, iov, iov_len);
if (bytes != (ssize_t)msg_full_size) { if (bytes != (ssize_t)msg_full_size) {
SYSERROR("Failed to forward message to seccomp proxy"); SYSERROR("Failed to forward message to seccomp proxy");
if (!reconnected) { if (!reconnected) {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment