diff options
| author | Darren Tucker <dtucker@dtucker.net> | 2022-02-26 14:06:14 +1100 |
|---|---|---|
| committer | Darren Tucker <dtucker@dtucker.net> | 2022-02-26 14:06:14 +1100 |
| commit | 284b6e5394652d519e31782e3b3cdfd7b21d1a81 (patch) | |
| tree | 47b1890a2ce72f4a27f02f0b1d7e93102e487701 | |
| parent | 0132056efabc5edb85c3c7105d2fb6dee41843c6 (diff) | |
Allow ppoll_time64 in seccomp sandbox.
Should fix sandbox violations on (some? at least i386 and armhf) 32bit
Linux platforms. Patch from chutzpahu at gentoo.org and cjwatson at
debian.org via bz#3396.
| -rw-r--r-- | sandbox-seccomp-filter.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 2e065ba3..4ce80cb2 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -276,6 +276,9 @@ static const struct sock_filter preauth_insns[] = { #ifdef __NR_ppoll SC_ALLOW(__NR_ppoll), #endif +#ifdef __NR_ppoll_time64 + SC_ALLOW(__NR_ppoll_time64), +#endif #ifdef __NR_poll SC_ALLOW(__NR_poll), #endif |