diff options
| author | Damien Miller <djm@mindrot.org> | 2014-01-31 09:25:34 +1100 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2014-01-31 09:25:34 +1100 |
| commit | 7e5cec6070673e9f9785ffc749837ada22fbe99f (patch) | |
| tree | 33f3131fde802ea4da8346c2838dae62766275ca /sandbox-seccomp-filter.c | |
| parent | cdb6c90811caa5df2df856be9b0b16db020fe31d (diff) | |
- (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)
syscall from sandboxes; it may be called by packet_close.
Diffstat (limited to 'sandbox-seccomp-filter.c')
| -rw-r--r-- | sandbox-seccomp-filter.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 2f73067e1..dbda60bab 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c | |||
| @@ -98,6 +98,7 @@ static const struct sock_filter preauth_insns[] = { | |||
| 98 | SC_ALLOW(read), | 98 | SC_ALLOW(read), |
| 99 | SC_ALLOW(write), | 99 | SC_ALLOW(write), |
| 100 | SC_ALLOW(close), | 100 | SC_ALLOW(close), |
| 101 | SC_ALLOW(shutdown), | ||
| 101 | SC_ALLOW(brk), | 102 | SC_ALLOW(brk), |
| 102 | SC_ALLOW(poll), | 103 | SC_ALLOW(poll), |
| 103 | #ifdef __NR__newselect | 104 | #ifdef __NR__newselect |