seccomp / libseccomp / 640

90%

main: 89%

push

travis-ci

<a href="https://github.com/seccomp/libseccomp/commit/<a class=hub.com/seccomp/libseccomp/commit/1db3b323d8b61eb83a186013422e57b75b18ace0">1db3b323d<a href="https://github.com/seccomp/libseccomp/commit/1db3b323d8b61eb83a186013422e57b75b18ace0">&quot;&gt;system: change our notification fd handling

This commit changes how we handle the notification fd by only
requesting it via _NEW_LISTENER if the filter has a _NOTIFY action
in it.  We also augment the seccomp_reset(NULL, ...) behavior so
that it closes the notification fd before resetting the global
state; applications that need to keep their notification fd open
across a call to seccomp_reset(NULL, ...) can simply dup() it.
Although one would have to wonder why the application would be
calling seccomp_reset(NULL, ...) in that case.

Acked-by: Tom Hromatka &amp;lt;tom.hromatka@oracle.com&amp;gt;
Signed-off-by: Paul Moore &amp;lt;paul@paul-moore.com&gt;
(imported from commit </a><a class="double-link" href="https://github.com/seccomp/libseccomp/commit/<a class="double-link" href="https://github.com/seccomp/libseccomp/commit/02812f99e8d1df2e671dac675b4af663d0266303">02812f99e</a>">02812f99e</a><a href="https://github.com/seccomp/libseccomp/commit/1db3b323d8b61eb83a186013422e57b75b18ace0">)

4362 of 4689 relevant lines covered (93.03%)

243398.88 hits per line