summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@dtucker.net>2019-12-16 13:55:56 +1100
committerColin Watson <cjwatson@debian.org>2020-01-11 23:30:03 +0000
commitc80c5e338c19964755f277b54b390016f5c829a4 (patch)
treef894ab7d63c33423d7274916824d846324b0e643
parentc80d266f4aed7224261b192b8e31ac87dc070cba (diff)
Allow clock_nanosleep_time64 in seccomp sandbox.
Needed on Linux ARM. bz#3100, patch from jjelen@redhat.com. Origin: upstream, https://anongit.mindrot.org/openssh.git/commit/?id=5af6fd5461bb709304e6979c8b7856c7af921c9e Last-Update: 2020-01-11 Patch-Name: sandbox-seccomp-clock_nanosleep_time64.patch
-rw-r--r--sandbox-seccomp-filter.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index be2397671..3ef30c9d5 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -245,6 +245,9 @@ static const struct sock_filter preauth_insns[] = {
245#ifdef __NR_clock_nanosleep 245#ifdef __NR_clock_nanosleep
246 SC_ALLOW(__NR_clock_nanosleep), 246 SC_ALLOW(__NR_clock_nanosleep),
247#endif 247#endif
248#ifdef __NR_clock_nanosleep_time64
249 SC_ALLOW(__NR_clock_nanosleep_time64),
250#endif
248#ifdef __NR__newselect 251#ifdef __NR__newselect
249 SC_ALLOW(__NR__newselect), 252 SC_ALLOW(__NR__newselect),
250#endif 253#endif