]> git.eshelyaron.com Git - emacs.git/commit
Add a variant of the Seccomp filter file that allows 'execve'.
authorPhilipp Stephani <phst@google.com>
Sun, 11 Apr 2021 17:47:36 +0000 (19:47 +0200)
committerPhilipp Stephani <phst@google.com>
Sun, 11 Apr 2021 19:19:09 +0000 (21:19 +0200)
commitc8d542fd593f06b85d4b7b712378a4f84ec4d2b3
treec2368357e6a417f4d7441e8eec13ee1ffc71b2d2
parentcf0701eff0f3b06e0324be07f7810cbaf261f7f3
Add a variant of the Seccomp filter file that allows 'execve'.

This is useful when starting Emacs with a Seccomp filter enabled,
e.g. using 'bwrap'.

* lib-src/seccomp-filter.c (main): Generate new Seccomp files.

* lib-src/Makefile.in (all)
(seccomp-filter.bpf seccomp-filter.pfc seccomp-filter-exec.bpf
seccomp-filter-exec.pfc): Generate new Seccomp files.

* .gitignore: Ignore new Seccomp files.

* test/src/emacs-tests.el (emacs-tests/bwrap/allows-stdout): New unit
test.
.gitignore
lib-src/Makefile.in
lib-src/seccomp-filter.c
test/src/emacs-resources/seccomp-filter-exec.bpf [new symlink]
test/src/emacs-tests.el