summaryrefslogtreecommitdiff
path: root/lib-src
diff options
context:
space:
mode:
authorPhilipp Stephani <phst@google.com>2021-04-18 10:33:41 +0200
committerPhilipp Stephani <phst@google.com>2021-04-18 10:34:48 +0200
commit2822246b5d8154d0166e17ffd28a1d85b57d68aa (patch)
tree233174fe40a61a07e1e4b6aae538c80d162bb30b /lib-src
parent18836fc2d054c221da0f2e0ffc73846281084f23 (diff)
downloademacs-2822246b5d8154d0166e17ffd28a1d85b57d68aa.tar.gz
Fix Seccomp filter on CentOS 8.3 (Bug#47828).
* lib-src/seccomp-filter.c (main): mmap: Also allow MAP_SHARED.
Diffstat (limited to 'lib-src')
-rw-r--r--lib-src/seccomp-filter.c6
1 files changed, 3 insertions, 3 deletions
diff --git a/lib-src/seccomp-filter.c b/lib-src/seccomp-filter.c
index fc3c3a0c074..8f8a990661c 100644
--- a/lib-src/seccomp-filter.c
+++ b/lib-src/seccomp-filter.c
@@ -183,9 +183,9 @@ main (int argc, char **argv)
some versions of the dynamic loader still use it. Also
allow allocating thread stacks. */
SCMP_A3_32 (SCMP_CMP_MASKED_EQ,
- ~(MAP_PRIVATE | MAP_FILE | MAP_ANONYMOUS
- | MAP_FIXED | MAP_DENYWRITE | MAP_STACK
- | MAP_NORESERVE),
+ ~(MAP_SHARED | MAP_PRIVATE | MAP_FILE
+ | MAP_ANONYMOUS | MAP_FIXED | MAP_DENYWRITE
+ | MAP_STACK | MAP_NORESERVE),
0));
RULE (SCMP_ACT_ALLOW, SCMP_SYS (mmap),
SCMP_A2_32 (SCMP_CMP_MASKED_EQ,