mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5188] Update syscall tables and seccomp groups #2905
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2905
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @rusty-snake on GitHub (Jun 10, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5188
Related: #3106
Since your last seccomp groups update Linux got new syscalls like
clone3(@process),close_range(@basic-io) ormove_mount,open_tree,fsconfig,fsmount,fsopen,fspick(@mount). We should update the group definitions to include newly added syscalls.@rusty-snake commented on GitHub (Jul 17, 2022):
@smitsohu can we close?
@smitsohu commented on GitHub (Jul 17, 2022):
Closing!
@kmk3 commented on GitHub (Aug 21, 2022):
Misc: These commits seem to be related:
fbceab90a("refresh and sort syscall tables", 2022-07-15)f4f44a5f9("refresh syscall groups (#5188)", 2022-07-17)And I made a few WIP commits related to the first one.
Since this issue appears to be the most relevant one to that commit, I renamed
this issue to be about the syscalls too.
@kmk3 commented on GitHub (Aug 21, 2022):
(Late review)
@smitsohu
fbceab90a("refresh and sort syscall tables", 2022-07-15)Please try to avoid doing both sorting and logical changes on the same commit,
as that can make it really hard to see what was changed (and I was interested
to see what syscalls were added/removed in this case).
Considering that the tables weren't fully sorted (by syscall name), the diffs
would have been clearer by splitting the changes like this:
Or like this: