faraphel/chrony
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sys_linux: check if execveat is defined

Browse source 
The syscall is missing on older systems.
This commit is contained in:
Miroslav Lichvar 2021-05-06 15:41:52 +02:00
parent 97973b1833
commit f9cbc4803d
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
sys_linux.c
View file

@ -616,7 +616,9 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
const int denied_any[] = { const int denied_any[] = {
SCMP_SYS(execve), SCMP_SYS(execve),
#ifdef __NR_execveat
SCMP_SYS(execveat), SCMP_SYS(execveat),
#endif
SCMP_SYS(fork), SCMP_SYS(fork),
SCMP_SYS(ptrace), SCMP_SYS(ptrace),
SCMP_SYS(vfork), SCMP_SYS(vfork),