/** * Initialises the syscall sandbox filter for any linux architecture, taking * into account various available features for different linux flavours. */ static int initialise_libseccomp_sandbox(sandbox_cfg_t* cfg) { if (install_sigsys_debugging()) return -1; if (install_syscall_filter(cfg)) return -2; if (register_cfg(cfg)) return -3; return 0; }
/** * Initialises the syscall sandbox filter for any linux architecture, taking * into account various available features for different linux flavours. */ static int initialise_libseccomp_sandbox(sandbox_cfg_t* cfg) { /* Prevent glibc from trying to open /dev/tty on fatal error */ setenv("LIBC_FATAL_STDERR_", "1", 1); if (install_sigsys_debugging()) return -1; if (install_syscall_filter(cfg)) return -2; if (register_cfg(cfg)) return -3; return 0; }