1
0
Fork 0

bpf: Use SECCOMP_RET_KILL_PROCESS instead SECCOMP_RET_KILL

We generally want to kill the process not the thread.
Dieser Commit ist enthalten in:
Albert S. 2021-08-12 11:40:29 +02:00
Ursprung fa06287b13
Commit 5cd45c09b7
1 geänderte Dateien mit 2 neuen und 2 gelöschten Zeilen

4
qssb.h
Datei anzeigen

@ -677,7 +677,7 @@ static int seccomp_enable(int *syscalls, size_t n, unsigned int per_syscall, uns
*/
static int seccomp_enable_blacklist(int *syscalls, size_t n)
{
return seccomp_enable(syscalls, n, SECCOMP_RET_KILL, SECCOMP_RET_ALLOW);
return seccomp_enable(syscalls, n, SECCOMP_RET_KILL_PROCESS, SECCOMP_RET_ALLOW);
}
/*
@ -687,7 +687,7 @@ static int seccomp_enable_blacklist(int *syscalls, size_t n)
*/
static int seccomp_enable_whitelist(int *syscalls, size_t n)
{
return seccomp_enable(syscalls, n, SECCOMP_RET_ALLOW, SECCOMP_RET_KILL);
return seccomp_enable(syscalls, n, SECCOMP_RET_ALLOW, SECCOMP_RET_KILL_PROCESS);
}
#if HAVE_LANDLOCK == 1