Miroslav Lichvar 29d7d3176d sys_linux: fix seccomp filter for BINDTODEVICE option ...

The BINDTODEVICE socket option is the first option in the seccomp filter
setting a string instead of int. Remove the length check from the
setsockopt rules to allow a device name longer than 3 characters.

This was reported in Debian bug #995207.

Fixes: b9f5ce83b0 ("sys_linux: allow BINDTODEVICE option in seccomp filter")

2021-10-06 10:09:35 +02:00

28 KiB

Raw Blame History

View Raw