[Bug 2361] seccomp filter (not only) for aarch64

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2361

--- Comment #16 from Jakub Jelen <jjelen at redhat.com> ---
Comment on attachment 2649
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2649
use a macro for socketcall test

Thank you for fast reply.
Yes. It would be better for readability. Additionally we can
parametrize the argument number to make it more generic:
>#define SC_ALLOW_ARG(_nr, _argn, _arg)
[...]
>	BPF_STMT(BPF_LD+BPF_W+BPF_ABS, \
>	    offsetof(struct seccomp_data, args[_argn])), \

Additionally I don't know what happened to the stat()-thing -- if the
previous patch was applied upstream, there is stat missing, also the
fstat needs to be conditional if it is not on some other architectures.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.