summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authordjm <djm>2014-07-16 23:49:37 +0000
committerdjm <djm>2014-07-16 23:49:37 +0000
commit24619f55783bc4a61786306070a51f62148f1e61 (patch)
tree828d972eec0e44dffd9bd5be701a8afe2537dc8e
parenta041e232053deaf7a1eeae48243b0d9e9d1b669d (diff)
downloadopenssh-24619f55783bc4a61786306070a51f62148f1e61.tar.gz
- deraadt@cvs.openbsd.org 2014/07/11 08:09:54
[sandbox-systrace.c] Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking, update your kernels and sshd soon.. libc will start using sendsyslog() in about 4 days.
-rw-r--r--ChangeLog6
-rw-r--r--sandbox-systrace.c3
2 files changed, 8 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index 317c3bee..9721794b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,12 @@
20140717
- (djm) [digest-openssl.c] Preserve array order when disabling digests.
Reported by Petr Lautrbach.
+ - OpenBSD CVS Sync
+ - deraadt@cvs.openbsd.org 2014/07/11 08:09:54
+ [sandbox-systrace.c]
+ Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking,
+ update your kernels and sshd soon.. libc will start using sendsyslog()
+ in about 4 days.
20140715
- (djm) [configure.ac] Delay checks for arc4random* until after libcrypto
diff --git a/sandbox-systrace.c b/sandbox-systrace.c
index 41cf489c..08cb650b 100644
--- a/sandbox-systrace.c
+++ b/sandbox-systrace.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sandbox-systrace.c,v 1.11 2014/06/18 02:59:13 matthew Exp $ */
+/* $OpenBSD: sandbox-systrace.c,v 1.12 2014/07/11 08:09:54 deraadt Exp $ */
/*
* Copyright (c) 2011 Damien Miller <djm@mindrot.org>
*
@@ -60,6 +60,7 @@ static const struct sandbox_policy preauth_policy[] = {
{ SYS___sysctl, SYSTR_POLICY_PERMIT },
#endif
+ { SYS_sendsyslog, SYSTR_POLICY_PERMIT },
{ SYS_close, SYSTR_POLICY_PERMIT },
{ SYS_exit, SYSTR_POLICY_PERMIT },
{ SYS_getpid, SYSTR_POLICY_PERMIT },