D7806: seccomp filter: Handle openat as well

[Fabian Vogt]

fvogt created this revision.
Restricted Application added a project: Plasma.

REVISION SUMMARY
  With glibc 2.26, the open syscall is not used anymore as openat is favored.
  This causes the testcase to fail, which shows that openat is not handled
  correctly by the seccomp filter.
  This adds a testcase that tests both open and openat (needs to use direct
  syscalls on glibc 2.26 as calls to open would otherwise result in openat)
  and implements the proper handling for openat in the filter.

TEST PLAN
  Ran seccomp test before and after, now succeeds.
  Ran make install, screenlocker still works.

REPOSITORY
  R133 KScreenLocker

BRANCH
  master

REVISION DETAIL
  https://phabricator.kde.org/D7806

AFFECTED FILES
  greeter/autotests/seccomp_test.cpp
  greeter/seccomp_filter.cpp

To: fvogt, #plasma, graesslin
Cc: plasma-devel, ZrenBot, progwolff, lesliezhai, ali-mohamed, jensreuterberg, abetts, sebas, apol, mart
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/plasma-devel/attachments/20170913/9e819b7b/attachment.html>