diff options
| author | gVisor bot <gvisor-bot@google.com> | 2021-07-09 02:02:58 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-07-09 02:02:58 +0000 |
| commit | ef96bb2d4957442a326b3610a3e247a33ae5aaff (patch) | |
| tree | 1fa52755b453afe34d17247280ce02eac9a4a156 /pkg/sentry/platform/ptrace | |
| parent | 673a86a67ecf6bc6b2881fd6ff3456b51e6b00ef (diff) | |
| parent | de29d8d415ab539195840aeba57a17cd6c89218f (diff) | |
Merge release-20210628.0-33-gde29d8d41 (automated)
Diffstat (limited to 'pkg/sentry/platform/ptrace')
| -rw-r--r-- | pkg/sentry/platform/ptrace/subprocess_linux.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/sentry/platform/ptrace/subprocess_linux.go b/pkg/sentry/platform/ptrace/subprocess_linux.go index 4f0260432..06a3bd340 100644 --- a/pkg/sentry/platform/ptrace/subprocess_linux.go +++ b/pkg/sentry/platform/ptrace/subprocess_linux.go @@ -181,7 +181,7 @@ func attachedThread(flags uintptr, defaultAction linux.BPFAction) (*thread, erro // Set an aggressive BPF filter for the stub and all it's children. See // the description of the BPF program built above. - if errno := seccomp.SetFilter(instrs); errno != 0 { + if errno := seccomp.SetFilterInChild(instrs); errno != 0 { unix.RawSyscall(unix.SYS_EXIT, uintptr(errno), 0, 0) } |