drakenclimber / libseccomp / 12700288548

88%

main: 89%

Build Type

push

github

Committed by drakenclimber

Commit Message

wip - got it working

Needs some cleanup and obviously lots of tests :)

Here's the test program I have been using:

int main(void)
{
        int rc, pfc = 0;
        scmp_filter_ctx ctx = NULL;

        ctx = seccomp_init(SCMP_ACT_ERRNO(5));
        if (ctx == NULL)
                return ENOMEM;

	fprintf(stderr, "%s:%d\n", __func__, __LINE__);
        rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW,
SCMP_SYS(rt_sigreturn), 0);
        if (rc != 0)
		goto out;
        rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(exit_group),
0);
        if (rc != 0)
                goto out;
        rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(write), 0);
        if (rc != 0)
                goto out;
        rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(fstat), 0);
        if (rc != 0)
                goto out;
        rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW,
SCMP_SYS(clock_nanosleep), 0);
        if (rc != 0)
                goto out;

	rc = seccomp_attr_set(ctx, SCMP_FLTATR_CTL_OPTIMIZE, 2);
	if (rc != 0)
		goto out;

	rc = seccomp_attr_set(ctx, SCMP_FLTATR_CTL_KVER, SCMP_KV_4_5);
	if (rc != 0)
		goto out;

	pfc = open("filter.pfc", O_WRONLY | O_TRUNC | O_CREAT, S_IRWXU |
S_IRWXG | S_IRWXO);
	if (pfc < 0)
		goto out;

	rc = seccomp_export_pfc(ctx, pfc);
	if (rc != 0)
		goto out;

        rc = seccomp_load(ctx);
        if (rc != 0)
                goto out;

out:
	if (pfc)
		close(pfc);

	seccomp_release(ctx);
        return (rc < 0 ? -rc : rc);
}

Signed-off-by: Tom Hromatka <tom.hromatka@oracle.com>

Run Details

7 of 63 new or added lines in 5 files covered. (11.11%)

91 existing lines in 2 files now uncovered.

2740 of 3125 relevant lines covered (87.68%)

288389.16 hits per line