diff options
author | Lennart Poettering <lennart@poettering.net> | 2020-11-19 11:14:41 +0100 |
---|---|---|
committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2020-11-19 16:44:50 +0100 |
commit | 5abede3247591248718026cb8be6cd231de7728b (patch) | |
tree | 69335003eb7e0802cf8c93bb9c8e12d45a455d89 /coccinelle | |
parent | Merge pull request #17667 from fbuihuu/fix-module-loading-from-udev-rule (diff) | |
download | systemd-5abede3247591248718026cb8be6cd231de7728b.tar.xz systemd-5abede3247591248718026cb8be6cd231de7728b.zip |
seccomp: move brk+mmap+mmap2 into @default syscall filter set
These three syscalls are internally used by libc's memory allocation
logic, i.e. ultimately back malloc(). Allocating a bit of memory is so
basic, it should just be in the default set.
This fixes a couple of issues with asan/msan and the seccomp tests: when
asan/msan is used some additional, large memory allocations take place
in the background, and unless mmap/mmap2/brk are allowlisted these will
fail, aborting the test prematurely.
Diffstat (limited to 'coccinelle')
0 files changed, 0 insertions, 0 deletions