mirror of
https://passt.top/passt
synced 2025-07-07 20:48:43 +02:00
passt: Allow exit_group() system call in seccomp profiles
We handle SIGQUIT and SIGTERM calling exit(), which is usually implemented with the exit_group() system call. If we don't allow exit_group(), we'll get a SIGSYS while handling SIGQUIT and SIGTERM, which means a misleading non-zero exit code. Reported-by: Wenli Quan <wquan@redhat.com> Link: https://bugzilla.redhat.com/show_bug.cgi?id=2101990 Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
This commit is contained in:
parent
17689cc9bf
commit
1d223e4b4c
3 changed files with 4 additions and 2 deletions
2
passt.c
2
passt.c
|
@ -257,6 +257,8 @@ static int sandbox(struct ctx *c)
|
|||
*
|
||||
* TODO: After unsharing the PID namespace and forking, SIG_DFL for SIGTERM and
|
||||
* SIGQUIT unexpectedly doesn't cause the process to terminate, figure out why.
|
||||
*
|
||||
* #syscalls exit_group
|
||||
*/
|
||||
void exit_handler(int signal)
|
||||
{
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue