[librseq.git] / tests / disable-rseq-syscall.c

// SPDX-License-Identifier: MIT
// SPDX-FileCopyrightText: 2024 Michael Jeanson <mjeanson@efficios.com>

#include <errno.h>
#include <seccomp.h>

/*
 * Library constructor.
 *
 * Apply a seccomp policy that blocks access to the rseq syscall and returns
 * ENOSYS.
 */
static __attribute__((constructor))
void disable_rseq_syscall(void)
{
	scmp_filter_ctx ctx;

	ctx = seccomp_init(SCMP_ACT_ALLOW);
	seccomp_rule_add(ctx, SCMP_ACT_ERRNO(ENOSYS), SCMP_SYS(rseq), 0);
	seccomp_load(ctx);
}
Commit	Line	Data
01bd794d MJ	1	// SPDX-License-Identifier: MIT
	2	// SPDX-FileCopyrightText: 2024 Michael Jeanson <mjeanson@efficios.com>
	3
	4	#include <errno.h>
	5	#include <seccomp.h>
	6
	7	/*
	8	* Library constructor.
	9	*
	10	* Apply a seccomp policy that blocks access to the rseq syscall and returns
	11	* ENOSYS.
	12	*/
	13	static __attribute__((constructor))
	14	void disable_rseq_syscall(void)
	15	{
	16	scmp_filter_ctx ctx;
	17
	18	ctx = seccomp_init(SCMP_ACT_ALLOW);
	19	seccomp_rule_add(ctx, SCMP_ACT_ERRNO(ENOSYS), SCMP_SYS(rseq), 0);
	20	seccomp_load(ctx);
	21	}