X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fprocd.git;a=blobdiff_plain;f=jail%2Fseccomp.c;h=fae08f98ee2f4efa47171db7566a2a3eb257e008;hp=27bf3ce5f94c340c9e7a29ad8563e91c29adedf8;hb=fa5ce1c2b4fe3fa6bb4bbc6697961655b952d8d4;hpb=7f9b174026a318862d6b2073e81ef62c82a9d18e;ds=sidebyside diff --git a/jail/seccomp.c b/jail/seccomp.c index 27bf3ce..fae08f9 100644 --- a/jail/seccomp.c +++ b/jail/seccomp.c @@ -22,15 +22,15 @@ #include "seccomp.h" #include "../syscall-names.h" -static int max_syscall = ARRAY_SIZE(syscall_names); - static int find_syscall(const char *name) { int i; - for (i = 0; i < max_syscall; i++) - if (syscall_names[i] && !strcmp(syscall_names[i], name)) - return i; + for (i = 0; i < SYSCALL_COUNT; i++) { + int sc = syscall_index_to_number(i); + if (syscall_name(sc) && !strcmp(syscall_name(sc), name)) + return sc; + } return -1; } @@ -125,7 +125,7 @@ int install_syscall_filter(const char *argv, const char *file) set_filter(&filter[idx], BPF_RET + BPF_K, 0, 0, SECCOMP_RET_KILL); if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) { - ERROR("%s: prctl(PR_SET_NO_NEW_PRIVS) failed: %s\n", argv, strerror(errno)); + ERROR("%s: prctl(PR_SET_NO_NEW_PRIVS) failed: %m\n", argv); return errno; } @@ -133,7 +133,7 @@ int install_syscall_filter(const char *argv, const char *file) prog.filter = filter; if (prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog)) { - ERROR("%s: prctl(PR_SET_SECCOMP) failed: %s\n", argv, strerror(errno)); + ERROR("%s: prctl(PR_SET_SECCOMP) failed: %m\n", argv); return errno; } return 0;