systemd

54,455 Commits 2 Branches 1 Tag

2 Commits

Author	SHA1	Message	Date
Luca Bruno	391b81cd03	seccomp: only abort on syscall name resolution failures (#3701 ) seccomp_syscall_resolve_name() can return a mix of positive and negative (pseudo-) syscall numbers, while errors are signaled via __NR_SCMP_ERROR. This commit lets the syscall filter parser only abort on real parsing failures, letting libseccomp handle pseudo-syscall number on its own and allowing proper multiplexed syscalls filtering.	2016-07-12 11:55:26 +02:00
Luca Bruno	aa4f6cf12c	man: clarify NotifyAccess overriding (#3620 ) Type=notify has a magic overriding case where a NotifyAccess=none is turned into a NotifyAccess=main for sanity purposes. This makes docs more clear about such behavior: https://github.com/systemd/systemd/blob/2787d83c28b7565ea6f80737170514e5e6186917/src/core/service.c#L650:L651	2016-06-28 20:14:08 +02:00

Author

SHA1

Message

Date

Luca Bruno

391b81cd03

seccomp: only abort on syscall name resolution failures (#3701 )

seccomp_syscall_resolve_name() can return a mix of positive and negative
(pseudo-) syscall numbers, while errors are signaled via __NR_SCMP_ERROR.
This commit lets the syscall filter parser only abort on real parsing
failures, letting libseccomp handle pseudo-syscall number on its own
and allowing proper multiplexed syscalls filtering.

2016-07-12 11:55:26 +02:00

Luca Bruno

aa4f6cf12c

man: clarify NotifyAccess overriding (#3620 )

Type=notify has a magic overriding case where a NotifyAccess=none
is turned into a NotifyAccess=main for sanity purposes.
This makes docs more clear about such behavior:
https://github.com/systemd/systemd/blob/2787d83c28b7565ea6f80737170514e5e6186917/src/core/service.c#L650:L651

2016-06-28 20:14:08 +02:00