seccomp filter: Handle openat as well
ClosedPublic

Authored by fvogt on Sep 13 2017, 6:02 PM.

Details

Summary

With glibc 2.26, the open syscall is not used anymore as openat is favored.
This causes the testcase to fail, which shows that openat is not handled
correctly by the seccomp filter.
This adds a testcase that tests both open and openat (needs to use direct
syscalls on glibc 2.26 as calls to open would otherwise result in openat)
and implements the proper handling for openat in the filter.

BUG: 384651

Test Plan

Ran seccomp test before and after, now succeeds.
Ran make install, screenlocker still works.

Diff Detail

Repository
R133 KScreenLocker
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.
fvogt created this revision.Sep 13 2017, 6:02 PM
Restricted Application added a project: Plasma. · View Herald TranscriptSep 13 2017, 6:02 PM
fvogt edited the summary of this revision. (Show Details)Sep 13 2017, 6:03 PM
graesslin accepted this revision.Sep 13 2017, 6:19 PM
This revision is now accepted and ready to land.Sep 13 2017, 6:19 PM
This revision was automatically updated to reflect the committed changes.