github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #5110] Log blocked syscall #2882

New issue

Closed

opened 2026-05-05 09:32:31 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 09:32:31 -06:00

Owner

Originally created by @rusty-snake on GitHub (Apr 20, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5110

By default (kernel default) only blocked syscall are only logged if --seccomp-error-action is kill or log but not Errno(EPERM).

Describe the solution you'd like

Load seccomp filter with syscall(SYS_seccomp, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_LOG, &fl->prog) on supported kernels (>=4.14).

Describe alternatives you've considered

N/A

Additional context

https://man7.org/linux/man-pages/man2/seccomp.2.html

Originally created by @rusty-snake on GitHub (Apr 20, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5110 ### Is your feature request related to a problem? Please describe. By default (kernel default) only blocked syscall are only logged if `--seccomp-error-action` is `kill` or `log` but not `Errno(EPERM)`. ### Describe the solution you'd like Load seccomp filter with `syscall(SYS_seccomp, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_LOG, &fl->prog)` on supported kernels (>=4.14). ### Describe alternatives you've considered N/A ### Additional context https://man7.org/linux/man-pages/man2/seccomp.2.html

gitea-mirror

2026-05-05 09:32:31 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 09:32:34 -06:00

Author

Owner

@netblue30 commented on GitHub (Apr 21, 2022):

I'll look into it!

@netblue30 commented on GitHub (Apr 21, 2022): I'll look into it!

gitea-mirror commented

2026-05-05 09:32:36 -06:00

Author

Owner

@netblue30 commented on GitHub (May 20, 2022):

All set!

@netblue30 commented on GitHub (May 20, 2022): All set!

gitea-mirror commented

2026-05-05 09:32:37 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 20, 2022):

FTR: c0d314f945

@rusty-snake commented on GitHub (May 20, 2022): FTR: c0d314f945b405f1e90a1a43719059cd22f55de7

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2882

No description provided.

Rows
Columns