From 396ac888867e840060aab6bcffee17377371771a Mon Sep 17 00:00:00 2001 From: Giuseppe Scrivano Date: Wed, 7 Sep 2022 13:25:05 +0200 Subject: [PATCH] seccomp: honor SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV Signed-off-by: Giuseppe Scrivano --- src/libcrun/seccomp.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/libcrun/seccomp.c b/src/libcrun/seccomp.c index 8ae06a677c..4151142572 100644 --- a/src/libcrun/seccomp.c +++ b/src/libcrun/seccomp.c @@ -74,6 +74,10 @@ # define SECCOMP_FILTER_FLAG_SPEC_ALLOW (1UL << 2) #endif +#ifndef SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV +# define SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV (1UL << 5) +#endif + static int syscall_seccomp (unsigned int operation, unsigned int flags, void *args) { @@ -209,6 +213,8 @@ libcrun_apply_seccomp (int infd, int listener_receiver_fd, const char *receiver_ flags |= SECCOMP_FILTER_FLAG_SPEC_ALLOW; else if (strcmp (seccomp_flags[i], "SECCOMP_FILTER_FLAG_LOG") == 0) flags |= SECCOMP_FILTER_FLAG_LOG; + else if (strcmp (seccomp_flags[i], "SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV") == 0) + flags |= SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV; else return crun_make_error (err, 0, "unknown seccomp option %s", seccomp_flags[i]); }