-
Notifications
You must be signed in to change notification settings - Fork 187
BUG: propagate notify_used when merging filter collections #475
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Hi @MegaManSec, thanks for catching this and sending a fix! I would like to request to small changes to the PR/commit:
Thanks! |
|
Thanks!
I see you've listed an email on the contact page of your website, is the problem you don't want to list it in the PR, or you don't want it in the git log at all? We really want to have an email address in the git log, it's helpful for a number of things. |
I've found that when I add my email address in any git log which is uploaded to github, i start to receive some type of spam on that email address in a matter of days; using the noreply github one allows it to be obvious where the PR is coming from (megamansec), while ensuring I don't receive that spam. Using the noreply github one also links to commit to my github account; which otherwise wouldn't be linked, as i remember. |
|
Unfortunately, I think we really want an email address in the git log as I want the contact info to remain useful outside of GH. |
|
Can I simply write another email address, but not sign with it? By signing with it, and for it to be associated with my github account, I need to do one of the following:
Since Github does not associate commits with a github account by the actual committer, but rather the Author and/or the committer of the commit, if this makes it difficult for me. Thanks! |
Perhaps some clarification would help here ... when I talk about a sign-off, I'm talking about the metadata at the end of the patch that satisfies the DCO requirement and looks like this: ... it's entirely independent from anything GH does and from anything you may do with commit signing. So, yes, as long as you have a Hopefully that helps? |
Merging filter collections didn’t carry over notify_used; if the source had SCMP_ACT_NOTIFY rules, the merged filter could skip requesting SECCOMP_FILTER_FLAG_NEW_LISTENER, yielding no listener FD. This ORs the flag from source to destination to keep seccomp notification working. Signed-off-by: Joshua Rogers <libseccomp@joshua.hu>
No, that doesn't work, because the DCO bot does not like that the committer email address differs from the sign-off:
|
|
Don't worry about the DCO bot, we can override as needed. I just manually approved the rest of the CI, let's make sure it passes cleanly, but from what I saw in the PR I don't expect any problems. |
|
Thank you! |
Merging filter collections didn’t carry over notify_used; if the source had SCMP_ACT_NOTIFY rules, the merged filter could skip requesting SECCOMP_FILTER_FLAG_NEW_LISTENER, yielding no listener FD. This ORs the flag from source to destination to keep seccomp notification working.
This bug was discovered with ZeroPath.