summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
diff options
context:
space:
mode:
authorKhem Raj <raj.khem@gmail.com>2020-01-07 16:26:45 -0800
committerDarren Tucker <dtucker@dtucker.net>2020-01-08 12:10:00 +1100
commitb110cefdfbf5a20f49b774a55062d6ded2fb6e22 (patch)
tree408979fcb081338009599057d509e541724b2ae1 /sandbox-seccomp-filter.c
parent3cc60c899a92a469e5118310ba6b74cb57215618 (diff)
downloadopenssh-git-b110cefdfbf5a20f49b774a55062d6ded2fb6e22.tar.gz
seccomp: Allow clock_gettime64() in sandbox.
This helps sshd accept connections on mips platforms with upcoming glibc ( 2.31 )
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r--sandbox-seccomp-filter.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index 3ef30c9d..999c46c9 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -248,6 +248,9 @@ static const struct sock_filter preauth_insns[] = {
#ifdef __NR_clock_nanosleep_time64
SC_ALLOW(__NR_clock_nanosleep_time64),
#endif
+#ifdef __NR_clock_gettime64
+ SC_ALLOW(__NR_clock_gettime64),
+#endif
#ifdef __NR__newselect
SC_ALLOW(__NR__newselect),
#endif