mirror of https://github.com/mkerrisk/man-pages
seccomp.2: Change SECCOMP_RET_ACTION to SECCOMP_RET_ACTION_FULL
In Linux 4.14, the action component of the return value switched from being 15 bits to being 16 bits. A new macro, SECCOMP_RET_ACTION_FULL, that masks the 16 bits was added, to replace the older SECCOMP_RET_ACTION. Reported-by: Kees Cook <keescook@chromium.org> Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
1d530819c5
commit
0c43878057
|
@ -365,7 +365,7 @@ the system call, but visible in the seccomp data.
|
|||
A seccomp filter returns a 32-bit value consisting of two parts:
|
||||
the most significant 16 bits
|
||||
(corresponding to the mask defined by the constant
|
||||
.BR SECCOMP_RET_ACTION )
|
||||
.BR SECCOMP_RET_ACTION_FULL )
|
||||
contain one of the "action" values listed below;
|
||||
the least significant 16-bits (defined by the constant
|
||||
.BR SECCOMP_RET_DATA )
|
||||
|
|
Loading…
Reference in New Issue