summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2014-01-31 09:25:34 +1100
committerDamien Miller <djm@mindrot.org>2014-01-31 09:25:34 +1100
commit7e5cec6070673e9f9785ffc749837ada22fbe99f (patch)
tree33f3131fde802ea4da8346c2838dae62766275ca /sandbox-seccomp-filter.c
parentcdb6c90811caa5df2df856be9b0b16db020fe31d (diff)
- (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)
syscall from sandboxes; it may be called by packet_close.
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r--sandbox-seccomp-filter.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index 2f73067e1..dbda60bab 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -98,6 +98,7 @@ static const struct sock_filter preauth_insns[] = {
98 SC_ALLOW(read), 98 SC_ALLOW(read),
99 SC_ALLOW(write), 99 SC_ALLOW(write),
100 SC_ALLOW(close), 100 SC_ALLOW(close),
101 SC_ALLOW(shutdown),
101 SC_ALLOW(brk), 102 SC_ALLOW(brk),
102 SC_ALLOW(poll), 103 SC_ALLOW(poll),
103#ifdef __NR__newselect 104#ifdef __NR__newselect