diff options
| author | Damien Miller <djm@mindrot.org> | 2018-09-15 19:37:48 +1000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2018-09-15 19:37:48 +1000 |
| commit | 149519b9f201dac755f3cba4789f4d76fecf0ee1 (patch) | |
| tree | 0fda580a4a517a3f5b785d8dd25885b4022fcc4a /sandbox-seccomp-filter.c | |
| parent | 4488ae1a6940af704c4dbf70f55bf2f756a16536 (diff) | |
| download | openssh-git-149519b9f201dac755f3cba4789f4d76fecf0ee1.tar.gz | |
add futex(2) syscall to seccomp sandbox
Apparently needed for some glibc/openssl combinations.
Patch from Arkadiusz Miśkiewicz
Diffstat (limited to 'sandbox-seccomp-filter.c')
| -rw-r--r-- | sandbox-seccomp-filter.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 12c4ee13..5edbc694 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -166,6 +166,9 @@ static const struct sock_filter preauth_insns[] = { #ifdef __NR_exit_group SC_ALLOW(__NR_exit_group), #endif +#ifdef __NR_futex + SC_ALLOW(__NR_futex), +#endif #ifdef __NR_geteuid SC_ALLOW(__NR_geteuid), #endif |