diff options
| author | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-06-02 10:19:48 -0300 |
|---|---|---|
| committer | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-06-05 12:51:48 -0300 |
| commit | d4963a844dc72c4ac14da3395cf511f3d191d689 (patch) | |
| tree | 778fbfbccffc7d09bd4ead257f90405d7692bff0 /time | |
| parent | be9b883ddd12acd2baa517fd1b5b8c8be22f733a (diff) | |
| download | glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.tar.gz glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.tar.xz glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.zip | |
linux: Fail as unsupported if personality call is filtered
Container management default seccomp filter [1] only accepts personality(2) with PER_LINUX, (0x0), UNAME26 (0x20000), PER_LINUX32 (0x8), UNAME26 | PER_LINUX32, and 0xffffffff (to query current personality) Although the documentation only state it is blocked to prevent 'enabling BSD emulation' (PER_BSD, not implemented by Linux), checking on repository log the real reason is to block ASLR disable flag (ADDR_NO_RANDOMIZE) and other poorly support emulations. So handle EPERM and fail as UNSUPPORTED if we can really check for BZ#19408. Checked on aarch64-linux-gnu. [1] https://github.com/moby/moby/blob/master/profiles/seccomp/default.json Reviewed-by: Florian Weimer <fweimer@redhat.com>
Diffstat (limited to 'time')
0 files changed, 0 insertions, 0 deletions