diff options
| author | Paul Moore <paul@paul-moore.com> | 2017-09-21 10:27:38 -0400 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2017-09-21 10:27:38 -0400 |
| commit | 355953c00ae34083f8acd89eac3360707e02dfaf (patch) | |
| tree | 3804deb8e5a9817f19eab5ae7315eec41921b38b /src/system.c | |
| parent | 9e61fd704dbaaa49b3ede59b99f80f39f123075f (diff) | |
| download | libseccomp-working-api_level.tar.gz | |
api: create an API level construct as part of the supported APIworking-api_level
WORK IN PROGRESS, DO NOT SHIP
XXX - manpage needed
XXX - tests needed
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'src/system.c')
| -rw-r--r-- | src/system.c | 33 |
1 files changed, 30 insertions, 3 deletions
diff --git a/src/system.c b/src/system.c index c0a1adc..f79943a 100644 --- a/src/system.c +++ b/src/system.c @@ -40,6 +40,7 @@ static int _nr_seccomp = -1; static int _support_seccomp_syscall = -1; +static int _support_seccomp_flag_tsync = -1; /** * Check to see if the seccomp() syscall is supported @@ -98,25 +99,51 @@ supported: } /** + * XXX + */ +void sys_set_seccomp_syscall(bool enable) +{ + _support_seccomp_syscall = (enable ? 1 : 0); +} + +/** * Check to see if a seccomp() flag is supported * @param flag the seccomp() flag * * This function checks to see if a seccomp() flag is supported by the system. - * If the flag is supported one is returned, zero if unsupported, negative - * values on error. + * Return one if the syscall is supported, zero if unsupported, negative values + * on error. * */ int sys_chk_seccomp_flag(int flag) { + int rc; + switch (flag) { case SECCOMP_FILTER_FLAG_TSYNC: - return sys_chk_seccomp_syscall(); + if (_support_seccomp_flag_tsync < 0) { + rc = sys_chk_seccomp_syscall(); + _support_seccomp_flag_tsync = (rc == 1 ? 1 : 0); + } + return _support_seccomp_flag_tsync; } return -EOPNOTSUPP; } /** + * XXX + */ +void sys_set_seccomp_flag(int flag, bool enable) +{ + switch (flag) { + case SECCOMP_FILTER_FLAG_TSYNC: + _support_seccomp_flag_tsync = (enable ? 1 : 0); + break; + } +} + +/** * Loads the filter into the kernel * @param col the filter collection * |