From 1d223e4b4c3b625383ceb368deb8d01e755a585f Mon Sep 17 00:00:00 2001 From: Stefano Brivio Date: Wed, 13 Jul 2022 03:36:09 +0200 Subject: passt: Allow exit_group() system call in seccomp profiles We handle SIGQUIT and SIGTERM calling exit(), which is usually implemented with the exit_group() system call. If we don't allow exit_group(), we'll get a SIGSYS while handling SIGQUIT and SIGTERM, which means a misleading non-zero exit code. Reported-by: Wenli Quan Link: https://bugzilla.redhat.com/show_bug.cgi?id=2101990 Signed-off-by: Stefano Brivio --- passt.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'passt.c') diff --git a/passt.c b/passt.c index 56fcf5f..a8d94b4 100644 --- a/passt.c +++ b/passt.c @@ -257,6 +257,8 @@ static int sandbox(struct ctx *c) * * TODO: After unsharing the PID namespace and forking, SIG_DFL for SIGTERM and * SIGQUIT unexpectedly doesn't cause the process to terminate, figure out why. + * + * #syscalls exit_group */ void exit_handler(int signal) { -- cgit v1.2.3