privops: enable system call filter

In preparation of OpenBSD support, add SYS_EnableSystemCallFilter() call
to PRV_StartHelper().

In OpenBSD the privops helper will use a system call filter (pledge(2)),
whereas in Linux the privops helper doesn't use any system call filter
at the moment.

Modify Unit test ntp_sources call to PRV_Initialise() with parameter
scfilter_level set to 0.
This commit is contained in:
Thomas Kupper
2026-02-11 07:53:41 +01:00
committed by Miroslav Lichvar
parent cda67351ae
commit fd60dabde7
6 changed files with 15 additions and 5 deletions

View File

@@ -137,7 +137,7 @@ test_unit(void)
CNF_Initialise(0, 0);
CNF_ParseLine(NULL, 1, conf);
PRV_Initialise();
PRV_Initialise(0);
LCL_Initialise();
TST_RegisterDummyDrivers();
SCH_Initialise();