X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fprocd.git;a=blobdiff_plain;f=jail%2Fseccomp.c;fp=jail%2Fseccomp.c;h=27bf3ce5f94c340c9e7a29ad8563e91c29adedf8;hp=1a2bb27a5d4d05f01e08c0cf0097230adf7d8418;hb=7f9b174026a318862d6b2073e81ef62c82a9d18e;hpb=e3c4302c3a9735bf46c98f5b34a12d5ce864f49f diff --git a/jail/seccomp.c b/jail/seccomp.c index 1a2bb27..27bf3ce 100644 --- a/jail/seccomp.c +++ b/jail/seccomp.c @@ -67,13 +67,13 @@ int install_syscall_filter(const char *argv, const char *file) blob_buf_init(&b, 0); if (!blobmsg_add_json_from_file(&b, file)) { - INFO("%s: failed to load %s\n", argv, file); + ERROR("%s: failed to load %s\n", argv, file); return -1; } blobmsg_parse(policy, __SECCOMP_MAX, tb, blob_data(b.head), blob_len(b.head)); if (!tb[SECCOMP_WHITELIST]) { - INFO("%s: %s is missing the syscall table\n", argv, file); + ERROR("%s: %s is missing the syscall table\n", argv, file); return -1; } @@ -85,7 +85,7 @@ int install_syscall_filter(const char *argv, const char *file) filter = calloc(sz, sizeof(struct sock_filter)); if (!filter) { - INFO("failed to allocate filter memory\n"); + ERROR("failed to allocate filter memory\n"); return -1; } @@ -125,7 +125,7 @@ int install_syscall_filter(const char *argv, const char *file) set_filter(&filter[idx], BPF_RET + BPF_K, 0, 0, SECCOMP_RET_KILL); if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)) { - INFO("%s: prctl(PR_SET_NO_NEW_PRIVS) failed: %s\n", argv, strerror(errno)); + ERROR("%s: prctl(PR_SET_NO_NEW_PRIVS) failed: %s\n", argv, strerror(errno)); return errno; } @@ -133,7 +133,7 @@ int install_syscall_filter(const char *argv, const char *file) prog.filter = filter; if (prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &prog)) { - INFO("%s: prctl(PR_SET_SECCOMP) failed: %s\n", argv, strerror(errno)); + ERROR("%s: prctl(PR_SET_SECCOMP) failed: %s\n", argv, strerror(errno)); return errno; } return 0;