refactor(seccomp): replace deprecated prctl with syscall

According to https://www.man7.org/linux/man-pages/man2/PR_SET_SECCOMP.2const.html using `prctl` for setting seccomp filer is deprecated, so switch to using `syscall` instead. Signed-off-by: Egor Lazarchuk <[email protected]>
firecracker-microvm · Dec 6, 2024 · 412c3d2 · 412c3d2
1 parent fd45366
commit 412c3d2
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/src/vmm/src/seccomp.rs b/src/vmm/src/seccomp.rs
@@ -114,9 +114,10 @@ pub fn apply_filter(bpf_filter: BpfProgramRef) -> Result<(), InstallationError>
         };
         let bpf_prog_ptr = &bpf_prog as *const SockFprog;
         {
-            let rc = libc::prctl(
-                libc::PR_SET_SECCOMP,
-                libc::SECCOMP_MODE_FILTER,
+            let rc = libc::syscall(
+                libc::SYS_seccomp,
+                libc::SECCOMP_SET_MODE_FILTER,
+                0,
                 bpf_prog_ptr,
             );
             if rc != 0 {