1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
/*
* Copyright (c) 2016-2018 Dmitry V. Levin <ldv@altlinux.org>
* All rights reserved.
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "tests.h"
#include <asm/unistd.h>
#ifdef HAVE_PRCTL
# include <sys/prctl.h>
#endif
#if defined HAVE_PRCTL && defined PR_SET_SECCOMP && defined __NR_exit
# include <stdio.h>
# include <unistd.h>
int
main(void)
{
static const char text1[] =
"prctl(PR_SET_SECCOMP, SECCOMP_MODE_STRICT) = 0\n";
static const char text2[] = "+++ exited with 0 +++\n";
int rc = prctl(PR_SET_SECCOMP, -1L, 1, 2, 3);
printf("prctl(PR_SET_SECCOMP, %#lx /* SECCOMP_MODE_??? */, 0x1, 0x2, 0x3)"
" = %d %s (%m)\n", -1L, rc, errno2name());
fflush(stdout);
rc = prctl(PR_SET_SECCOMP, 1);
if (rc) {
printf("prctl(PR_SET_SECCOMP, SECCOMP_MODE_STRICT)"
" = %d %s (%m)\n", rc, errno2name());
fflush(stdout);
rc = 0;
} else {
/*
* If kernel implementaton of SECCOMP_MODE_STRICT is buggy,
* the following syscall will result to SIGKILL.
*/
rc = write(1, text1, LENGTH_OF(text1)) != LENGTH_OF(text1);
}
rc += write(1, text2, LENGTH_OF(text2)) != LENGTH_OF(text2);
return !!syscall(__NR_exit, rc);
}
#else
SKIP_MAIN_UNDEFINED("HAVE_PRCTL && PR_SET_SECCOMP && __NR_exit")
#endif
|
