Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Log blocked syscall #5110

Closed
rusty-snake opened this issue Apr 20, 2022 · 3 comments
Closed

Log blocked syscall #5110

rusty-snake opened this issue Apr 20, 2022 · 3 comments
Labels
enhancement New feature request

Comments

@rusty-snake
Copy link
Collaborator

Is your feature request related to a problem? Please describe.

By default (kernel default) only blocked syscall are only logged if --seccomp-error-action is kill or log but not Errno(EPERM).

Describe the solution you'd like

Load seccomp filter with syscall(SYS_seccomp, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_LOG, &fl->prog) on supported kernels (>=4.14).

Describe alternatives you've considered

N/A

Additional context

https://man7.org/linux/man-pages/man2/seccomp.2.html
@rusty-snake rusty-snake added the enhancement New feature request label Apr 20, 2022
@netblue30
Copy link
Owner

I'll look into it!

netblue30 added a commit that referenced this issue May 9, 2022
@netblue30
always log seccomp errors (#5110)
a3f00ed
@netblue30
Copy link
Owner

All set!

@netblue30 netblue30 added the in testing A bugfix that is being tested label May 20, 2022
@rusty-snake
Copy link
Collaborator Author

FTR: c0d314f

kmk3 added a commit that referenced this issue Jun 8, 2022
@kmk3
RELNOTES: add feature: always log seccomp errors
6984ad4 
Relates to #5110.
@EdiDD EdiDD mentioned this issue Jun 17, 2022
Closed
@rusty-snake rusty-snake removed the in testing A bugfix that is being tested label Jun 21, 2022
@kmk3 kmk3 moved this to Done (on RELNOTES) in Release 0.9.70 Sep 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature request
Projects
Release 0.9.70
Status: Done (on RELNOTES)
Milestone
No milestone
Development

No branches or pull requests
2 participants
@netblue30 @rusty-snake