summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
diff options
context:
space:
mode:
authordjm@openbsd.org <djm@openbsd.org>2015-06-29 22:35:12 +0000
committerDamien Miller <djm@mindrot.org>2015-06-30 08:36:34 +1000
commit512caddf590857af6aa12218461b5c0441028cf5 (patch)
treefd1beaf73f1494a669187f985b7070c704c18384 /sandbox-seccomp-filter.c
parent78c2a4f883ea9aba866358e2acd9793a7f42ca93 (diff)
downloadopenssh-git-512caddf590857af6aa12218461b5c0441028cf5.tar.gz
upstream commit
add getpid to sandbox, reachable by grace_alarm_handler reported by Jakub Jelen; bz#2419 Upstream-ID: d0da1117c16d4c223954995d35b0f47c8f684cd8
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r--sandbox-seccomp-filter.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index ef9d6fa2..2462bcc8 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -141,6 +141,9 @@ static const struct sock_filter preauth_insns[] = {
#ifdef __NR_exit_group
SC_ALLOW(exit_group),
#endif
+#ifdef __NR_getpgid
+ SC_ALLOW(getpgid),
+#endif
#ifdef __NR_getpid
SC_ALLOW(getpid),
#endif