summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2018-05-25 13:36:58 +1000
committerDamien Miller <djm@mindrot.org>2018-05-25 13:45:01 +1000
commit4ef75926ef517d539f2c7aac3188b09f315c86a7 (patch)
tree46075b86e1f2eefdc1631fc9d4b3a18a695ab5b3
parent4b22fd8ecefd059a66140be67f352eb6145a9d88 (diff)
Permit getuid()/geteuid() syscalls.
Requested for Linux/s390; patch from Eduardo Barretto via bz#2752; ok dtucker
-rw-r--r--sandbox-seccomp-filter.c12
1 files changed, 12 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index a189b2fb5..12c4ee130 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -166,6 +166,12 @@ static const struct sock_filter preauth_insns[] = {
166#ifdef __NR_exit_group 166#ifdef __NR_exit_group
167 SC_ALLOW(__NR_exit_group), 167 SC_ALLOW(__NR_exit_group),
168#endif 168#endif
169#ifdef __NR_geteuid
170 SC_ALLOW(__NR_geteuid),
171#endif
172#ifdef __NR_geteuid32
173 SC_ALLOW(__NR_geteuid32),
174#endif
169#ifdef __NR_getpgid 175#ifdef __NR_getpgid
170 SC_ALLOW(__NR_getpgid), 176 SC_ALLOW(__NR_getpgid),
171#endif 177#endif
@@ -178,6 +184,12 @@ static const struct sock_filter preauth_insns[] = {
178#ifdef __NR_gettimeofday 184#ifdef __NR_gettimeofday
179 SC_ALLOW(__NR_gettimeofday), 185 SC_ALLOW(__NR_gettimeofday),
180#endif 186#endif
187#ifdef __NR_getuid
188 SC_ALLOW(__NR_getuid),
189#endif
190#ifdef __NR_getuid32
191 SC_ALLOW(__NR_getuid32),
192#endif
181#ifdef __NR_madvise 193#ifdef __NR_madvise
182 SC_ALLOW(__NR_madvise), 194 SC_ALLOW(__NR_madvise),
183#endif 195#endif