From 0d9fca76bb69e162265b2d25cb79f1890c0da31b Mon Sep 17 00:00:00 2001 From: Mathieu Malaterre Date: Tue, 20 Mar 2018 16:08:20 +0100 Subject: [PATCH] seccomp: enable RestrictAddressFamilies on ppc (#8505) In commit da1921a5c3 ppc64/ppc64el were added as supported architectures for socketcall() for the POWER family. Extend the support for the 32bits architectures. --- src/shared/seccomp-util.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c index 220658b3ad..3691e73b84 100644 --- a/src/shared/seccomp-util.c +++ b/src/shared/seccomp-util.c @@ -1182,6 +1182,7 @@ int seccomp_restrict_address_families(Set *address_families, bool whitelist) { case SCMP_ARCH_X32: case SCMP_ARCH_ARM: case SCMP_ARCH_AARCH64: + case SCMP_ARCH_PPC: case SCMP_ARCH_PPC64: case SCMP_ARCH_PPC64LE: /* These we know we support (i.e. are the ones that do not use socketcall()) */ @@ -1190,7 +1191,6 @@ int seccomp_restrict_address_families(Set *address_families, bool whitelist) { case SCMP_ARCH_S390: case SCMP_ARCH_S390X: - case SCMP_ARCH_PPC: case SCMP_ARCH_X86: default: /* These we either know we don't support (i.e. are the ones that do use socketcall()), or we