diff options
| author | Philipp Stephani | 2020-12-14 21:25:11 +0100 |
|---|---|---|
| committer | Philipp Stephani | 2021-04-10 18:47:26 +0200 |
| commit | be8328acf9aa464f848e682e63e417a18529af9e (patch) | |
| tree | b7f8191920af5e326b2a2feac9ddbeb8551fadba /lib | |
| parent | 53dfd85a7f971875e716a55f010ee508bce89eed (diff) | |
| download | emacs-scratch/seccomp-emacs-open.tar.gz emacs-scratch/seccomp-emacs-open.zip | |
Add support for --seccomp command-line option.scratch/seccomp-emacs-open
When passing this option on GNU/Linux, Emacs installs a Secure
Computing kernel system call filter. See Bug#45198.
* configure.ac: Check for seccomp header.
* src/emacs.c (usage_message): Document --seccomp option.
(emacs_seccomp): New wrapper for 'seccomp' syscall.
(load_seccomp, maybe_load_seccomp): New helper functions.
(main): Potentially load seccomp filters during startup.
(standard_args): Add --seccomp option.
* lisp/startup.el (command-line): Detect and ignore --seccomp option.
* test/src/emacs-tests.el (emacs-tests/seccomp/absent-file)
(emacs-tests/seccomp/empty-file)
(emacs-tests/seccomp/file-too-large)
(emacs-tests/seccomp/invalid-file-size): New unit tests.
(emacs-tests--with-temp-file): New helper macro.
* etc/NEWS: Document new --seccomp option.
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions