commit 3d9fc696a5a511bc49a41cba936b8b200481982f
author Paul Lawrence <paullawrence@google.com> Tue Jan 24 10:44:55 2017 -0800
committer Paul Lawrence <paullawrence@google.com> Tue Jan 24 11:07:04 2017 -0800
tree 9fb8aac5c5f560eea860e1451c46b0827de53af5
parent 7844b4c5dbd0be9ea4212a523da2dd6a4804032c

Use trap not kill in seccomp filter

Bug: 34647665
Test: Make sure boots, check that causing a seccomp failure creates a
      crash dump

Change-Id: I5ab2fe3e8322a3c38318c97d343834baa874af8d

libc/tools/genseccomp.py

diff --git a/libc/tools/genseccomp.py b/libc/tools/genseccomp.py
index b82bb12..bd003a3 100755
--- a/libc/tools/genseccomp.py
+++ b/libc/tools/genseccomp.py
@@ -126,7 +126,7 @@
              ", 0, " + str(len(bpf)) + "),")
 
   # Add the error and allow calls at the end
-  bpf.append("BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_KILL),")
+  bpf.append("BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_TRAP),")
   bpf.append("BPF_STMT(BPF_RET|BPF_K, SECCOMP_RET_ALLOW),")
 
   # And output policy