From b951d024a5ebf7a64d36ee57f73f059ca6d78798 Mon Sep 17 00:00:00 2001 From: valoq Date: Sun, 3 Apr 2022 20:59:32 +0200 Subject: [PATCH] clean process shutdown by sandbox --- zathura/seccomp-filters.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/zathura/seccomp-filters.c b/zathura/seccomp-filters.c index 04d77d3..7c44995 100644 --- a/zathura/seccomp-filters.c +++ b/zathura/seccomp-filters.c @@ -132,7 +132,10 @@ seccomp_enable_strict_filter(void) } /* initialize the filter */ - scmp_filter_ctx ctx = seccomp_init(SCMP_ACT_KILL); + /* ENOSYS tells the calling process that the syscall is not implemented, + * allowing for a potential fallback function to execute + * scmp_filter_ctx ctx = seccomp_init(SCMP_ACT_ERRNO(ENOSYS));*/ + scmp_filter_ctx ctx = seccomp_init(SCMP_ACT_KILL_PROCESS); if (ctx == NULL){ girara_error("seccomp_init failed"); return -1;