crtxcr/exile.h
1
0
Vork 0
Code Kwesties 14 Pull-aanvragen 1 Publicaties Wiki Activiteit

test: test_seccomp_blacklisted_call_permitted(): Add missing default policy

Bladeren bron
This commit is contained in:
Albert S. 2021-09-05 12:30:12 +02:00
bovenliggende b0d0beab22
commit 68fd1a0a87
1 gewijzigde bestanden met toevoegingen van 1 en 0 verwijderingen
Statistieken weergeven Download Patch-bestand Download Diff-bestand Expand all files Collapse all files

1
test.c
Bestand weergeven

@ -42,6 +42,7 @@ int test_seccomp_blacklisted_call_permitted(int argc, char *argv[])
struct qssb_policy *policy = qssb_init_policy(); struct qssb_policy *policy = qssb_init_policy();
qssb_append_syscall_policy(policy, QSSB_SYSCALL_DENY_KILL_PROCESS, QSSB_SYS(getuid)); qssb_append_syscall_policy(policy, QSSB_SYSCALL_DENY_KILL_PROCESS, QSSB_SYS(getuid));
qssb_append_syscall_default_policy(policy, QSSB_SYSCALL_ALLOW);
int ret = qssb_enable_policy(policy); int ret = qssb_enable_policy(policy);
//geteuid is not blacklisted, so must succeed //geteuid is not blacklisted, so must succeed