summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
diff options
context:
space:
mode:
authorEduardo Barretto <ebarretto@linux.vnet.ibm.com>2017-05-09 13:33:30 -0300
committerColin Watson <cjwatson@debian.org>2018-10-20 22:54:09 +0100
commit9ce189b9f22890421b7f8d3f49a39186d3ce3e14 (patch)
treea33d8ac934ff6ec8b95bb025bae99cf497d02851 /sandbox-seccomp-filter.c
parent690939ba320d93e6f3ab5266bea94d8fb06c8bae (diff)
Enable specific ioctl call for EP11 crypto card (s390)
The EP11 crypto card needs to make an ioctl call, which receives an specific argument. This crypto card is for s390 only. Signed-off-by: Eduardo Barretto <ebarretto@linux.vnet.ibm.com> Origin: other, https://bugzilla.mindrot.org/show_bug.cgi?id=2752 Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=2752 Bug-Ubuntu: https://bugs.launchpad.net/bugs/1686618 Last-Update: 2017-08-28 Patch-Name: seccomp-s390-ioctl-ep11-crypto.patch
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r--sandbox-seccomp-filter.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index d4bc20828..ef4de8c65 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -256,6 +256,8 @@ static const struct sock_filter preauth_insns[] = {
256 SC_ALLOW_ARG(__NR_ioctl, 1, Z90STAT_STATUS_MASK), 256 SC_ALLOW_ARG(__NR_ioctl, 1, Z90STAT_STATUS_MASK),
257 SC_ALLOW_ARG(__NR_ioctl, 1, ICARSAMODEXPO), 257 SC_ALLOW_ARG(__NR_ioctl, 1, ICARSAMODEXPO),
258 SC_ALLOW_ARG(__NR_ioctl, 1, ICARSACRT), 258 SC_ALLOW_ARG(__NR_ioctl, 1, ICARSACRT),
259 /* Allow ioctls for EP11 crypto card on s390 */
260 SC_ALLOW_ARG(__NR_ioctl, 1, ZSENDEP11CPRB),
259#endif 261#endif
260#if defined(__x86_64__) && defined(__ILP32__) && defined(__X32_SYSCALL_BIT) 262#if defined(__x86_64__) && defined(__ILP32__) && defined(__X32_SYSCALL_BIT)
261 /* 263 /*