selftests/seccomp: Avoid using "sysctl" for report
authorKees Cook <keescook@chromium.org>
Thu, 17 Jun 2021 23:18:34 +0000 (16:18 -0700)
committerKees Cook <keescook@chromium.org>
Mon, 28 Jun 2021 19:49:52 +0000 (12:49 -0700)
Instead of depending on "sysctl" being installed, just use "grep -H" for
sysctl status reporting. Additionally report kernel version for easier
comparisons.

Signed-off-by: Kees Cook <keescook@chromium.org>
tools/testing/selftests/seccomp/seccomp_benchmark.c

index 363cad7..6e5102a 100644 (file)
@@ -145,9 +145,13 @@ int main(int argc, char *argv[])
 
        setbuf(stdout, NULL);
 
+       printf("Running on:\n");
+       system("uname -a");
+
        printf("Current BPF sysctl settings:\n");
-       system("sysctl net.core.bpf_jit_enable");
-       system("sysctl net.core.bpf_jit_harden");
+       /* Avoid using "sysctl" which may not be installed. */
+       system("grep -H . /proc/sys/net/core/bpf_jit_enable");
+       system("grep -H . /proc/sys/net/core/bpf_jit_harden");
 
        if (argc > 1)
                samples = strtoull(argv[1], NULL, 0);