woj/nsjail
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sandbox: casting for syscall()

Browse Source
This commit is contained in:
Robert Swiecki 2018-05-23 15:46:25 +02:00
parent 48e8634ba5
commit 6d3fb7e5b2
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sandbox.cc
View File

@ -60,12 +60,13 @@ static bool prepareAndCommit(nsjconf_t* nsjconf) {
if (nsjconf->seccomp_log) {
#ifndef __NR_seccomp
LOG_E(
"The __NR_seccomp is not defined with this kernel header files (kernel headers "
"The __NR_seccomp is not defined with this kernel's header files (kernel "
"headers "
"too old?)");
return false;
#else
if (syscall(__NR_seccomp, SECCOMP_SET_MODE_FILTER,
SECCOMP_FILTER_FLAG_TSYNC | SECCOMP_FILTER_FLAG_LOG,
if (syscall(__NR_seccomp, (uintptr_t)SECCOMP_SET_MODE_FILTER,
(uintptr_t)(SECCOMP_FILTER_FLAG_TSYNC | SECCOMP_FILTER_FLAG_LOG),
&nsjconf->seccomp_fprog) == -1) {
PLOG_E(
"seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC | "