Bug#893722: libseccomp: missing pkey_mprotect syscall (and probably others)

[James Cowgill]

Source: libseccomp
Version: 2.3.1-2.1
Severity: normal
X-Debbugs-CC: pkg-systemd-maintainers at lists.alioth.debian.org

Hi,

While testing some seccomp improvements for systemd on mips, I
encountered some EFAULT errors while systemd was trying to enable the
MemoryDenyWriteExecute option on foreign architectures (eg mips-le on a
mips64-le host). I traced this to libseccomp missing definitions for the
"pkey_mprotect" syscall which systemd tries to use.

As a result of this bug, MemoryDenyWriteExecute currently fails to work
for all foreign architectures in systemd.

This has been fixed upstream in v2.3.2 which updated the system call
list, so please can you update libseccomp to at least this version. I
can help with this if you would like me to.

Thanks,
James

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-systemd-maintainers/attachments/20180321/3c53c8df/attachment.sig>