procyberian/emacs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove SCMP_FLTATR_CTL_LOG attribute from Seccomp filter.

Browse source 
Whether or not we log failing syscalls isn't security-critical, and we
shouldn't care.

* lib-src/seccomp-filter.c (main): Remove log attribute.
This commit is contained in:
Philipp Stephani 2021-04-11 16:41:44 +02:00
parent 9dc26d4a8a
commit d06c54db1b
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
lib-src/seccomp-filter.c
View file

@ -151,7 +151,6 @@ main (int argc, char **argv)
set_attribute (SCMP_FLTATR_ACT_BADARCH, SCMP_ACT_KILL_PROCESS);
set_attribute (SCMP_FLTATR_CTL_NNP, 1);
set_attribute (SCMP_FLTATR_CTL_TSYNC, 1);
set_attribute (SCMP_FLTATR_CTL_LOG, 0);
verify (CHAR_BIT == 8);
verify (sizeof (int) == 4 && INT_MIN == INT32_MIN