Add a handler for seccomp crashes

When seccomp causes a crash, use a SIGSYS action and handle it to print
out an error. Most functions are not allowed at that point (no buffered
output, no ?printf functions, no abort, ...), so the implementation is
as minimal as possible.
Print out a message with the syscall number and exit the process (all
threads).

1 files changed, 4 insertions, 0 deletions

diff --git a/memcached.c b/memcached.c
index 9f66573..c68781a 100644
--- a/memcached.c
+++ b/memcached.c
@@ -8227,6 +8227,10 @@ int main (int argc, char **argv) {
         slabs_prefill_global();
     }
 #endif
+
+    if (settings.drop_privileges) {
+        setup_privilege_violations_handler();
+    }
     /*
      * ignore SIGPIPE signals; we can use errno == EPIPE if we
      * need that information