diff options
| author | Philipp Stephani | 2021-04-11 21:14:09 +0200 |
|---|---|---|
| committer | Philipp Stephani | 2021-04-11 21:14:41 +0200 |
| commit | cf0701eff0f3b06e0324be07f7810cbaf261f7f3 (patch) | |
| tree | 7c9d39821cc55c16fd62e56acc2c524e8b3a2f63 | |
| parent | 9a57897ea1a125782ff332814d3f978c38162cf8 (diff) | |
| download | emacs-cf0701eff0f3b06e0324be07f7810cbaf261f7f3.tar.gz emacs-cf0701eff0f3b06e0324be07f7810cbaf261f7f3.zip | |
* lib-src/seccomp-filter.c (main): Also allow O_NOFOLLOW.
| -rw-r--r-- | lib-src/seccomp-filter.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib-src/seccomp-filter.c b/lib-src/seccomp-filter.c index 9d25a5fe142..a5f2e0adbca 100644 --- a/lib-src/seccomp-filter.c +++ b/lib-src/seccomp-filter.c | |||
| @@ -241,12 +241,12 @@ main (int argc, char **argv) | |||
| 241 | RULE (SCMP_ACT_ALLOW, SCMP_SYS (open), | 241 | RULE (SCMP_ACT_ALLOW, SCMP_SYS (open), |
| 242 | SCMP_A1_32 (SCMP_CMP_MASKED_EQ, | 242 | SCMP_A1_32 (SCMP_CMP_MASKED_EQ, |
| 243 | ~(O_RDONLY | O_BINARY | O_CLOEXEC | O_PATH | 243 | ~(O_RDONLY | O_BINARY | O_CLOEXEC | O_PATH |
| 244 | | O_DIRECTORY), | 244 | | O_DIRECTORY | O_NOFOLLOW), |
| 245 | 0)); | 245 | 0)); |
| 246 | RULE (SCMP_ACT_ALLOW, SCMP_SYS (openat), | 246 | RULE (SCMP_ACT_ALLOW, SCMP_SYS (openat), |
| 247 | SCMP_A2_32 (SCMP_CMP_MASKED_EQ, | 247 | SCMP_A2_32 (SCMP_CMP_MASKED_EQ, |
| 248 | ~(O_RDONLY | O_BINARY | O_CLOEXEC | O_PATH | 248 | ~(O_RDONLY | O_BINARY | O_CLOEXEC | O_PATH |
| 249 | | O_DIRECTORY), | 249 | | O_DIRECTORY | O_NOFOLLOW), |
| 250 | 0)); | 250 | 0)); |
| 251 | 251 | ||
| 252 | /* Allow `tcgetpgrp'. */ | 252 | /* Allow `tcgetpgrp'. */ |