• Jigsaw52's avatar
    Fix seccomp sandbox rules for openat #27315 · c79b4397
    Jigsaw52 authored
    The need for casting negative syscall arguments depends on the
    glibc version. This affects the rules for the openat syscall which
    uses the constant AT_FDCWD that is defined as a negative number.
    This commit adds logic to only apply the cast when necessary, on
    glibc versions from 2.27 onwards.