mirror of
https://github.com/systemd/systemd.git
synced 2025-03-22 06:50:18 +03:00
seccomp: remove 'gettid' syscall from '@process' syscall set (#6989)
The gettid syscall is one of the most basic syscalls, it never fails and it operates on current thread. Most applications are not suposed to use it, however even if it is used there is no much justification on blocking it. This patch removes it from '@process' set so if users blacklist this set to block setns or clone syscalls, the gettid syscall will still be available. Of course they can always block gettid explicitly. Note that the gettid is already in the '@default' set.
This commit is contained in:
parent
c05f3c8ff8
commit
7c72bab4e3
@ -647,7 +647,6 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
|
||||
"execveat\0"
|
||||
"fork\0"
|
||||
"getrusage\0"
|
||||
"gettid\0"
|
||||
"kill\0"
|
||||
"prctl\0"
|
||||
"rt_sigqueueinfo\0"
|
||||
|
Loading…
x
Reference in New Issue
Block a user