diff options
| author | Lennart Poettering <lennart@poettering.net> | 2012-07-17 04:17:53 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2012-07-17 04:17:53 +0200 |
| commit | 8351ceaea9480d9c2979aa2ff0f4982cfdfef58d (patch) | |
| tree | fc1f94e5a17679960774da386a54d145255e4ef1 /src/core/dbus-execute.h | |
| parent | cd96b3b86abb4a88cac2722bdfb6e5d4413f6831 (diff) | |
execute: support syscall filtering using seccomp filters
Diffstat (limited to 'src/core/dbus-execute.h')
| -rw-r--r-- | src/core/dbus-execute.h | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/core/dbus-execute.h b/src/core/dbus-execute.h index b8bbe1c9f2..dc267e6ccc 100644 --- a/src/core/dbus-execute.h +++ b/src/core/dbus-execute.h @@ -96,7 +96,9 @@ " <property name=\"ControlGroupModify\" type=\"b\" access=\"read\"/>\n" \ " <property name=\"ControlGroupPersistent\" type=\"b\" access=\"read\"/>\n" \ " <property name=\"PrivateNetwork\" type=\"b\" access=\"read\"/>\n" \ - " <property name=\"IgnoreSIGPIPE\" type=\"b\" access=\"read\"/>\n" + " <property name=\"IgnoreSIGPIPE\" type=\"b\" access=\"read\"/>\n" \ + " <property name=\"NoNewPrivileges\" type=\"b\" access=\"read\"/>\n" \ + " <property name=\"SystemCallFilter\" type=\"au\" access=\"read\"/>\n" #define BUS_EXEC_COMMAND_INTERFACE(name) \ " <property name=\"" name "\" type=\"a(sasbttuii)\" access=\"read\"/>\n" @@ -121,5 +123,6 @@ int bus_execute_append_rlimits(DBusMessageIter *i, const char *property, void *d int bus_execute_append_command(DBusMessageIter *u, const char *property, void *data); int bus_execute_append_kill_mode(DBusMessageIter *i, const char *property, void *data); int bus_execute_append_env_files(DBusMessageIter *i, const char *property, void *data); +int bus_execute_append_syscall_filter(DBusMessageIter *i, const char *property, void *data); #endif |