SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

analyze: fix SystemCallFilter property signature

Browse Source 
The SystemCallFilter entry in the security info map declared signature "(as)" but
its property_read_system_call_filter callback reads a "(bas)" (the manager exports
it as "(bas)"), matching the sibling RestrictAddressFamilies entry. The mismatch was
harmless while the declared signature was never checked, but becomes a dropped
property once it is enforced. Declare "(bas)".

Follow-up for ec16f3b6dd
This commit is contained in:
Luca Boccassi
2026-06-11 09:43:09 +02:00
committed by Daan De Meyer
parent 441514184f
commit 7827db326f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/analyze/analyze-security.c
+1 -1
View File
@@ -2338,7 +2338,7 @@ static int acquire_security_info(sd_bus *bus, const char *name, SecurityInfo *in
{ "RootImage", "s", NULL, offsetof(SecurityInfo, root_image) },
{ "SupplementaryGroups", "as", NULL, offsetof(SecurityInfo, supplementary_groups) },
{ "SystemCallArchitectures", "as", property_read_syscall_archs, 0 },
{ "SystemCallFilter", "(as)", property_read_system_call_filter, 0 },
{ "SystemCallFilter", "(bas)", property_read_system_call_filter, 0 },
{ "Type", "s", NULL, offsetof(SecurityInfo, type) },
{ "UMask", "u", property_read_umask, 0 },
{ "User", "s", NULL, offsetof(SecurityInfo, user) },