[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] virtiofsd: Seccomp: Add 'send' for syslog
From: |
Dr. David Alan Gilbert |
Subject: |
Re: [PATCH] virtiofsd: Seccomp: Add 'send' for syslog |
Date: |
Mon, 2 Nov 2020 15:13:50 +0000 |
User-agent: |
Mutt/1.14.6 (2020-07-11) |
* Philippe Mathieu-Daudé (philmd@redhat.com) wrote:
> On 11/2/20 4:07 PM, Dr. David Alan Gilbert (git) wrote:
> > From: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
> >
> > On ppc it looks like syslog ends up using 'send' rather than 'sendto'.
> >
> > Reference: https://github.com/kata-containers/kata-containers/issues/1050
> >
> > Reported-by: amulmek1@in.ibm.com
> > Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
> > ---
> > tools/virtiofsd/passthrough_seccomp.c | 1 +
> > 1 file changed, 1 insertion(+)
> >
> > diff --git a/tools/virtiofsd/passthrough_seccomp.c
> > b/tools/virtiofsd/passthrough_seccomp.c
> > index eb9af8265f..672fb72a31 100644
> > --- a/tools/virtiofsd/passthrough_seccomp.c
> > +++ b/tools/virtiofsd/passthrough_seccomp.c
> > @@ -118,6 +118,7 @@ static const int syscall_whitelist[] = {
> >
> > /* Syscalls used when --syslog is enabled */
> > static const int syscall_whitelist_syslog[] = {
>
> Is it worth restricting the syscall to POWER?
>
> #if defined(__powerpc64__)
I don't think so, since it's legal for a libc to use either;
so any other libc or architecture could choose either to use.
Dave
> > + SCMP_SYS(send),
>
> #endif
>
> > SCMP_SYS(sendto),
> > };
> >
> >
>
--
Dr. David Alan Gilbert / dgilbert@redhat.com / Manchester, UK