]> git.proxmox.com Git - mirror_libseccomp.git/commitdiff
python: fix error in pydoc
authorJonah Petri <jonah@petri.us>
Thu, 12 Oct 2017 15:57:27 +0000 (11:57 -0400)
committerPaul Moore <paul@paul-moore.com>
Tue, 1 Oct 2019 06:28:21 +0000 (02:28 -0400)
Fix the pydoc example so it's runnable.

Signed-off-by: Jonah Petri <jonah@petri.us>
Acked-by: Tom Hromatka <tom.hromatka@oracle.com>
[PM: fix subject line (add prefix)]
Signed-off-by: Paul Moore <paul@paul-moore.com>
src/python/seccomp.pyx

index e9c825f3d7cee34a5bffd82f9ca145775dc8a2b0..44e4925dd67ed96d6f057f6e9eecb7c187aeba6e 100644 (file)
@@ -61,13 +61,18 @@ Example:
     # create a filter object with a default KILL action
     f = SyscallFilter(defaction=KILL)
 
+    # add some basic syscalls which python typically wants
+    f.add_rule(ALLOW, "rt_sigaction")
+    f.add_rule(ALLOW, "rt_sigreturn")
+    f.add_rule(ALLOW, "exit_group")
+    f.add_rule(ALLOW, "brk")
+
     # add syscall filter rules to allow certain syscalls
     f.add_rule(ALLOW, "open")
     f.add_rule(ALLOW, "close")
-    f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin))
-    f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout))
-    f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr))
-    f.add_rule(ALLOW, "rt_sigreturn")
+    f.add_rule(ALLOW, "read", Arg(0, EQ, sys.stdin.fileno()))
+    f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stdout.fileno()))
+    f.add_rule(ALLOW, "write", Arg(0, EQ, sys.stderr.fileno()))
 
     # load the filter into the kernel
     f.load()