[PR #1412] [MERGED] Improve loading of seccomp filter and memory-deny-write-execute feature #3950

Closed
opened 2026-05-05 10:10:56 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/1412
Author: @topimiettinen
Created: 7/29/2017
Status: Merged
Merged: 7/30/2017
Merged by: @topimiettinen

Base: masterHead: master


📝 Commits (2)

  • d250725 Improve loading of seccomp filter
  • 76becd7 Memory-deny-write-execute feature

📊 Changes

12 files changed (+106 additions, -17 deletions)

View changed files

📝 Makefile.in (+3 -1)
📝 src/firejail/firejail.h (+3 -0)
📝 src/firejail/main.c (+7 -0)
📝 src/firejail/preproc.c (+2 -0)
📝 src/firejail/profile.c (+11 -0)
📝 src/firejail/sandbox.c (+5 -0)
📝 src/firejail/seccomp.c (+8 -15)
📝 src/fseccomp/fseccomp.h (+3 -0)
📝 src/fseccomp/main.c (+3 -0)
📝 src/fseccomp/seccomp.c (+54 -0)
📝 src/fseccomp/seccomp_file.c (+1 -1)
📝 src/man/firejail.txt (+6 -0)

📄 Description

The seccomp patch also fixes a memory leak and double load.

Memory-deny-write-execute is similar to systemd directive with same name (sans CamelCase).


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/1412 **Author:** [@topimiettinen](https://github.com/topimiettinen) **Created:** 7/29/2017 **Status:** ✅ Merged **Merged:** 7/30/2017 **Merged by:** [@topimiettinen](https://github.com/topimiettinen) **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (2) - [`d250725`](https://github.com/netblue30/firejail/commit/d2507256ce57407f5c001f884d38f8d01c4b75a5) Improve loading of seccomp filter - [`76becd7`](https://github.com/netblue30/firejail/commit/76becd77df871121c6548d4a264c224662bb14a2) Memory-deny-write-execute feature ### 📊 Changes **12 files changed** (+106 additions, -17 deletions) <details> <summary>View changed files</summary> 📝 `Makefile.in` (+3 -1) 📝 `src/firejail/firejail.h` (+3 -0) 📝 `src/firejail/main.c` (+7 -0) 📝 `src/firejail/preproc.c` (+2 -0) 📝 `src/firejail/profile.c` (+11 -0) 📝 `src/firejail/sandbox.c` (+5 -0) 📝 `src/firejail/seccomp.c` (+8 -15) 📝 `src/fseccomp/fseccomp.h` (+3 -0) 📝 `src/fseccomp/main.c` (+3 -0) 📝 `src/fseccomp/seccomp.c` (+54 -0) 📝 `src/fseccomp/seccomp_file.c` (+1 -1) 📝 `src/man/firejail.txt` (+6 -0) </details> ### 📄 Description The seccomp patch also fixes a memory leak and double load. Memory-deny-write-execute is similar to systemd directive with same name (sans CamelCase). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:10:56 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3950
No description provided.