summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2014-07-17 09:49:37 +1000
committerDamien Miller <djm@mindrot.org>2014-07-17 09:49:37 +1000
commit9d69d937b46ecba17f16d923e538ceda7b705c7a (patch)
tree5d31b270cba53ad21c729e98b512dced0719a2cf
parentf6293a0b4129826fc2e37e4062f96825df43c326 (diff)
downloadopenssh-git-9d69d937b46ecba17f16d923e538ceda7b705c7a.tar.gz
- deraadt@cvs.openbsd.org 2014/07/11 08:09:54
[sandbox-systrace.c] Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking, update your kernels and sshd soon.. libc will start using sendsyslog() in about 4 days.
-rw-r--r--ChangeLog6
-rw-r--r--sandbox-systrace.c3
2 files changed, 8 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 317c3bee..9721794b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,12 @@
20140717
- (djm) [digest-openssl.c] Preserve array order when disabling digests.
Reported by Petr Lautrbach.
+ - OpenBSD CVS Sync
+ - deraadt@cvs.openbsd.org 2014/07/11 08:09:54
+ [sandbox-systrace.c]
+ Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking,
+ update your kernels and sshd soon.. libc will start using sendsyslog()
+ in about 4 days.
20140715
- (djm) [configure.ac] Delay checks for arc4random* until after libcrypto
diff --git a/sandbox-systrace.c b/sandbox-systrace.c
index 41cf489c..08cb650b 100644
--- a/sandbox-systrace.c
+++ b/sandbox-systrace.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sandbox-systrace.c,v 1.11 2014/06/18 02:59:13 matthew Exp $ */
+/* $OpenBSD: sandbox-systrace.c,v 1.12 2014/07/11 08:09:54 deraadt Exp $ */
/*
* Copyright (c) 2011 Damien Miller <djm@mindrot.org>
*
@@ -60,6 +60,7 @@ static const struct sandbox_policy preauth_policy[] = {
{ SYS___sysctl, SYSTR_POLICY_PERMIT },
#endif
+ { SYS_sendsyslog, SYSTR_POLICY_PERMIT },
{ SYS_close, SYSTR_POLICY_PERMIT },
{ SYS_exit, SYSTR_POLICY_PERMIT },
{ SYS_getpid, SYSTR_POLICY_PERMIT },