diff options
Diffstat (limited to 'sandbox-seccomp-filter.c')
| -rw-r--r-- | sandbox-seccomp-filter.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index ef4de8c65..e8f31555e 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c | |||
| @@ -149,6 +149,15 @@ static const struct sock_filter preauth_insns[] = { | |||
| 149 | #ifdef __NR_stat64 | 149 | #ifdef __NR_stat64 |
| 150 | SC_DENY(__NR_stat64, EACCES), | 150 | SC_DENY(__NR_stat64, EACCES), |
| 151 | #endif | 151 | #endif |
| 152 | #ifdef __NR_shmget | ||
| 153 | SC_DENY(__NR_shmget, EACCES), | ||
| 154 | #endif | ||
| 155 | #ifdef __NR_shmat | ||
| 156 | SC_DENY(__NR_shmat, EACCES), | ||
| 157 | #endif | ||
| 158 | #ifdef __NR_shmdt | ||
| 159 | SC_DENY(__NR_shmdt, EACCES), | ||
| 160 | #endif | ||
| 152 | 161 | ||
| 153 | /* Syscalls to permit */ | 162 | /* Syscalls to permit */ |
| 154 | #ifdef __NR_brk | 163 | #ifdef __NR_brk |