diff options
author | Khem Raj <raj.khem@gmail.com> | 2020-01-07 16:26:45 -0800 |
---|---|---|
committer | Colin Watson <cjwatson@debian.org> | 2020-01-11 23:31:43 +0000 |
commit | 93e9440bae1818746e0cc7f2543001db9d0ea1ea (patch) | |
tree | d4599bb8906c83a6eacc81a3b83b022842404702 /sandbox-seccomp-filter.c | |
parent | c80c5e338c19964755f277b54b390016f5c829a4 (diff) |
seccomp: Allow clock_gettime64() in sandbox.
This helps sshd accept connections on mips platforms with
upcoming glibc ( 2.31 )
Origin: upstream, https://anongit.mindrot.org/openssh.git/commit/?id=b110cefdfbf5a20f49b774a55062d6ded2fb6e22
Last-Update: 2020-01-11
Patch-Name: sandbox-seccomp-clock_gettime64.patch
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r-- | sandbox-seccomp-filter.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 3ef30c9d5..999c46c9f 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c | |||
@@ -248,6 +248,9 @@ static const struct sock_filter preauth_insns[] = { | |||
248 | #ifdef __NR_clock_nanosleep_time64 | 248 | #ifdef __NR_clock_nanosleep_time64 |
249 | SC_ALLOW(__NR_clock_nanosleep_time64), | 249 | SC_ALLOW(__NR_clock_nanosleep_time64), |
250 | #endif | 250 | #endif |
251 | #ifdef __NR_clock_gettime64 | ||
252 | SC_ALLOW(__NR_clock_gettime64), | ||
253 | #endif | ||
251 | #ifdef __NR__newselect | 254 | #ifdef __NR__newselect |
252 | SC_ALLOW(__NR__newselect), | 255 | SC_ALLOW(__NR__newselect), |
253 | #endif | 256 | #endif |