diff options
| author | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-06-02 10:19:48 -0300 |
|---|---|---|
| committer | Adhemerval Zanella <adhemerval.zanella@linaro.org> | 2023-06-05 12:51:48 -0300 |
| commit | d4963a844dc72c4ac14da3395cf511f3d191d689 (patch) | |
| tree | 778fbfbccffc7d09bd4ead257f90405d7692bff0 /math/test-fexcept.c | |
| parent | be9b883ddd12acd2baa517fd1b5b8c8be22f733a (diff) | |
| download | glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.tar glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.tar.gz glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.tar.bz2 glibc-d4963a844dc72c4ac14da3395cf511f3d191d689.zip | |
linux: Fail as unsupported if personality call is filtered
Container management default seccomp filter [1] only accepts
personality(2) with PER_LINUX, (0x0), UNAME26 (0x20000),
PER_LINUX32 (0x8), UNAME26 | PER_LINUX32, and 0xffffffff (to query
current personality)
Although the documentation only state it is blocked to prevent
'enabling BSD emulation' (PER_BSD, not implemented by Linux), checking
on repository log the real reason is to block ASLR disable flag
(ADDR_NO_RANDOMIZE) and other poorly support emulations.
So handle EPERM and fail as UNSUPPORTED if we can really check for
BZ#19408.
Checked on aarch64-linux-gnu.
[1] https://github.com/moby/moby/blob/master/profiles/seccomp/default.json
Reviewed-by: Florian Weimer <fweimer@redhat.com>
Diffstat (limited to 'math/test-fexcept.c')
0 files changed, 0 insertions, 0 deletions