diff options
| author | Darren Tucker <dtucker@dtucker.net> | 2022-02-26 14:06:14 +1100 |
|---|---|---|
| committer | Darren Tucker <dtucker@dtucker.net> | 2022-02-26 14:14:40 +1100 |
| commit | 995cf19fbef0b10dbcf1dd8d6382cec9194e08c5 (patch) | |
| tree | 22f67ce1baf6663e3127ed2e2abfe437927a4a87 | |
| parent | 6c4a67ece33d9551429490898bb3c793a689e913 (diff) | |
| download | openssh-git-995cf19fbef0b10dbcf1dd8d6382cec9194e08c5.tar.gz | |
Allow ppoll_time64 in seccomp sandbox.
Should fix sandbox violations on (some? at least i386 and armhf) 32bit
Linux platforms. Patch from chutzpahu at gentoo.org and cjwatson at
debian.org via bz#3396.
| -rw-r--r-- | sandbox-seccomp-filter.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 2e065ba3..4ce80cb2 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -276,6 +276,9 @@ static const struct sock_filter preauth_insns[] = { #ifdef __NR_ppoll SC_ALLOW(__NR_ppoll), #endif +#ifdef __NR_ppoll_time64 + SC_ALLOW(__NR_ppoll_time64), +#endif #ifdef __NR_poll SC_ALLOW(__NR_poll), #endif |