From 61ed43a86a3721708aeeee72b23bfa1eacd921b2 Mon Sep 17 00:00:00 2001
From: Dmitry Vyukov <dvyukov@google.com>
Date: Thu, 13 Sep 2018 12:00:58 +0200
Subject: sys/linux: prohibit EXT4_IOC_SHUTDOWN

EXT4_IOC_SHUTDOWN EXT4_IOC_SHUTDOWN on root fs effectively brings the machine down in weird ways.
---
 executor/syscalls.h | 5 -----
 1 file changed, 5 deletions(-)

(limited to 'executor/syscalls.h')

diff --git a/executor/syscalls.h b/executor/syscalls.h
index e3f73dbaa..d9db80a52 100644
--- a/executor/syscalls.h
+++ b/executor/syscalls.h
@@ -1741,7 +1741,6 @@ const call_t syscalls[] = {
     {"ioctl$EXT4_IOC_PRECACHE_EXTENTS", 54},
     {"ioctl$EXT4_IOC_RESIZE_FS", 54},
     {"ioctl$EXT4_IOC_SETFLAGS", 54},
-    {"ioctl$EXT4_IOC_SHUTDOWN", 54},
     {"ioctl$EXT4_IOC_SWAP_BOOT", 54},
     {"ioctl$FIBMAP", 54},
     {"ioctl$FICLONE", 54},
@@ -3942,7 +3941,6 @@ const call_t syscalls[] = {
     {"ioctl$EXT4_IOC_PRECACHE_EXTENTS", 16},
     {"ioctl$EXT4_IOC_RESIZE_FS", 16},
     {"ioctl$EXT4_IOC_SETFLAGS", 16},
-    {"ioctl$EXT4_IOC_SHUTDOWN", 16},
     {"ioctl$EXT4_IOC_SWAP_BOOT", 16},
     {"ioctl$FIBMAP", 16},
     {"ioctl$FICLONE", 16},
@@ -6179,7 +6177,6 @@ const call_t syscalls[] = {
     {"ioctl$EXT4_IOC_PRECACHE_EXTENTS", 54},
     {"ioctl$EXT4_IOC_RESIZE_FS", 54},
     {"ioctl$EXT4_IOC_SETFLAGS", 54},
-    {"ioctl$EXT4_IOC_SHUTDOWN", 54},
     {"ioctl$EXT4_IOC_SWAP_BOOT", 54},
     {"ioctl$FIBMAP", 54},
     {"ioctl$FICLONE", 54},
@@ -8370,7 +8367,6 @@ const call_t syscalls[] = {
     {"ioctl$EXT4_IOC_PRECACHE_EXTENTS", 29},
     {"ioctl$EXT4_IOC_RESIZE_FS", 29},
     {"ioctl$EXT4_IOC_SETFLAGS", 29},
-    {"ioctl$EXT4_IOC_SHUTDOWN", 29},
     {"ioctl$EXT4_IOC_SWAP_BOOT", 29},
     {"ioctl$FIBMAP", 29},
     {"ioctl$FICLONE", 29},
@@ -10554,7 +10550,6 @@ const call_t syscalls[] = {
     {"ioctl$EXT4_IOC_PRECACHE_EXTENTS", 54},
     {"ioctl$EXT4_IOC_RESIZE_FS", 54},
     {"ioctl$EXT4_IOC_SETFLAGS", 54},
-    {"ioctl$EXT4_IOC_SHUTDOWN", 54},
     {"ioctl$EXT4_IOC_SWAP_BOOT", 54},
     {"ioctl$FIBMAP", 54},
     {"ioctl$FICLONE", 54},
-- 
cgit mrf-deployment