diff options
| author | Colin Watson <cjwatson@debian.org> | 2017-10-04 11:23:58 +0100 |
|---|---|---|
| committer | Colin Watson <cjwatson@debian.org> | 2017-10-05 23:58:12 +0100 |
| commit | 0556ea972b15607b7e13ff31bc05840881c91dd3 (patch) | |
| tree | d6b8d48062d0278b5ae0eeff42d0e9afa9f26860 /sandbox-seccomp-filter.c | |
| parent | db2122d97eb1ecdd8d99b7bf79b0dd2b5addfd92 (diff) | |
| parent | 801a62eedaaf47b20dbf4b426dc3e084bf0c8d49 (diff) | |
New upstream release (7.6p1)
Diffstat (limited to 'sandbox-seccomp-filter.c')
| -rw-r--r-- | sandbox-seccomp-filter.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 3833424bf..98062f152 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c | |||
| @@ -243,6 +243,7 @@ static const struct sock_filter preauth_insns[] = { | |||
| 243 | #endif | 243 | #endif |
| 244 | #ifdef __NR_socketcall | 244 | #ifdef __NR_socketcall |
| 245 | SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN), | 245 | SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN), |
| 246 | SC_DENY(__NR_socketcall, EACCES), | ||
| 246 | #endif | 247 | #endif |
| 247 | #if defined(__NR_ioctl) && defined(__s390__) | 248 | #if defined(__NR_ioctl) && defined(__s390__) |
| 248 | /* Allow ioctls for ICA crypto card on s390 */ | 249 | /* Allow ioctls for ICA crypto card on s390 */ |