1
0
mirror of https://sourceware.org/git/glibc.git synced 2025-07-11 21:41:51 +03:00
Files
glibc/sysdeps/unix/sysv/linux
Adhemerval Zanella d4963a844d linux: Fail as unsupported if personality call is filtered
Container management default seccomp filter [1] only accepts
personality(2) with PER_LINUX, (0x0), UNAME26 (0x20000),
PER_LINUX32 (0x8), UNAME26 | PER_LINUX32, and 0xffffffff (to query
current personality)

Although the documentation only state it is blocked to prevent
'enabling BSD emulation' (PER_BSD, not implemented by Linux), checking
on repository log the real reason is to block ASLR disable flag
(ADDR_NO_RANDOMIZE) and other poorly support emulations.

So handle EPERM and fail as UNSUPPORTED if we can really check for
BZ#19408.

Checked on aarch64-linux-gnu.

[1] https://github.com/moby/moby/blob/master/profiles/seccomp/default.json

Reviewed-by: Florian Weimer <fweimer@redhat.com>
2023-06-05 12:51:48 -03:00
..
2023-03-02 19:10:37 +00:00
2023-05-29 17:39:57 -03:00
2022-05-16 15:03:49 -03:00
2022-05-16 15:03:49 -03:00
2023-04-26 08:06:44 -04:00
2023-05-16 07:19:31 -04:00