diff mbox series

[LEDE-DEV,procd,11/17] Start seccomp-enabled services via seccomp-trace

Message ID 20170912111250.31576-14-sojkam1@fel.cvut.cz
State Accepted
Headers show
Series [LEDE-DEV,procd,01/17] utrace: Fix environment initialization | expand

Commit Message

Michal Sojka Sept. 12, 2017, 11:12 a.m. UTC 
Signed-off-by: Michal Sojka <sojkam1@fel.cvut.cz>
---
 service/instance.c | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)
diff mbox series

Patch

diff --git a/service/instance.c b/service/instance.c
index 1760a09..7703686 100644
--- a/service/instance.c
+++ b/service/instance.c
@@ -303,16 +303,13 @@  instance_run(struct service_instance *in, int _stdout, int _stderr)
 	if (seccomp)
 		setenv("SECCOMP_FILE", in->seccomp, 1);
 
-	if ((seccomp || setlbf) && asprintf(&ld_preload, "LD_PRELOAD=%s%s%s",
-			seccomp ? "/lib/libpreload-seccomp.so" : "",
-			seccomp && setlbf ? ":" : "",
-			setlbf ? "/lib/libsetlbf.so" : "") > 0)
+	if (setlbf && asprintf(&ld_preload, "LD_PRELOAD=/lib/libsetlbf.so") > 0)
 		putenv(ld_preload);
 
 	blobmsg_list_for_each(&in->limits, var)
 		instance_limits(blobmsg_name(var->data), blobmsg_data(var->data));
 
-	if (in->trace)
+	if (in->trace || seccomp)
 		argc += 1;
 
 	argv = alloca(sizeof(char *) * (argc + in->jail.argc));
@@ -320,6 +317,8 @@  instance_run(struct service_instance *in, int _stdout, int _stderr)
 
 	if (in->trace)
 		argv[argc++] = trace;
+	else if (seccomp)
+		argv[argc++] = "/sbin/seccomp-trace";
 
 	if (in->has_jail)
 		argc = jail_run(in, argv);