Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 221272f9 authored by Kees Cook's avatar Kees Cook
Browse files

seccomp: swap hard-coded zeros to defined name 



For clarity, if CONFIG_SECCOMP isn't defined, seccomp_mode() is returning
"disabled". This makes that more clear, along with another 0-use, and
results in no operational change.

Signed-off-by: default avatarKees Cook <keescook@chromium.org>
parent 13c4a901

include/linux/seccomp.h

+1 −1
Original line number Diff line number Diff line
@@ -78,7 +78,7 @@ static inline long prctl_set_seccomp(unsigned long arg2, char __user *arg3) 


static inline int seccomp_mode(struct seccomp *s)

{

	return 0;

	return SECCOMP_MODE_DISABLED;

}

#endif /* CONFIG_SECCOMP */

kernel/seccomp.c

+1 −1
Original line number Diff line number Diff line
@@ -594,7 +594,7 @@ void secure_computing_strict(int this_syscall) 
	    unlikely(current->ptrace & PT_SUSPEND_SECCOMP))

		return;



	if (mode == 0)

	if (mode == SECCOMP_MODE_DISABLED)

		return;

	else if (mode == SECCOMP_MODE_STRICT)

		__secure_computing_strict(this_syscall);