seccomp: Separate read and write code for actions_logged sysctl

Browse source

Break the read and write paths of the kernel.seccomp.actions_logged
sysctl into separate functions to maintain readability. An upcoming
change will need to audit writes, but not reads, of this sysctl which
would introduce too many conditional code paths on whether or not the
'write' parameter evaluates to true.

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Paul Moore <paul@paul-moore.com>

...

This commit is contained in:

Tyler Hicks 2018-05-04 01:08:12 +00:00 • committed by Paul Moore

parent 23bcc480da

commit d013db0294

1 changed files with 38 additions and 22 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

64

kernel/seccomp.c

View file