crtxcr/exile.h
1
0
Fork 0
Code Issues 14 Pull Requests 1 Releases Wiki Activity

vow: fix clone filter broken by ca0f8279

Browse Source
This commit is contained in:
Albert S. 2021-12-28 13:17:20 +01:00
parent 55b43fdaac
commit b2306299d5
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
exile.h
View File

@ -733,8 +733,8 @@ static int get_vow_argfilter(long syscall, uint64_t vow_promises, struct sock_fi
struct sock_filter clone_filter[] = {
/* It's the first argument for x86_64 */
EXILE_BPF_LOAD_SECCOMP_ARG(0),
EXILE_BPF_NO_MATCH_SET(CLONE_VM),
EXILE_BPF_NO_MATCH_SET(CLONE_THREAD),
EXILE_BPF_CMP_SET(CLONE_VM, 0, EXILE_SYSCALL_EXIT_BPF_NO_MATCH),
EXILE_BPF_CMP_SET(CLONE_THREAD, 0, EXILE_SYSCALL_EXIT_BPF_NO_MATCH),
EXILE_BPF_NO_MATCH_SET(CLONE_NEWCGROUP),
EXILE_BPF_NO_MATCH_SET(CLONE_NEWIPC),
EXILE_BPF_NO_MATCH_SET(CLONE_NEWNET),