summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@dtucker.net>2019-12-16 13:55:56 +1100
committerColin Watson <cjwatson@debian.org>2020-02-19 11:49:55 +0000
commitf0cfb9ad4b83693731505c945c0685de64483c8d (patch)
treebb98f98476927b6a7edec7fd760f5ce5895537b5 /sandbox-seccomp-filter.c
parentcb38e55b8af8756b2d6d6f6a1c1a5f949e15b980 (diff)
Allow clock_nanosleep_time64 in seccomp sandbox.
Needed on Linux ARM. bz#3100, patch from jjelen@redhat.com. Origin: upstream, https://anongit.mindrot.org/openssh.git/commit/?id=5af6fd5461bb709304e6979c8b7856c7af921c9e Last-Update: 2020-01-11 Patch-Name: sandbox-seccomp-clock_nanosleep_time64.patch
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r--sandbox-seccomp-filter.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index be2397671..3ef30c9d5 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -245,6 +245,9 @@ static const struct sock_filter preauth_insns[] = {
245#ifdef __NR_clock_nanosleep 245#ifdef __NR_clock_nanosleep
246 SC_ALLOW(__NR_clock_nanosleep), 246 SC_ALLOW(__NR_clock_nanosleep),
247#endif 247#endif
248#ifdef __NR_clock_nanosleep_time64
249 SC_ALLOW(__NR_clock_nanosleep_time64),
250#endif
248#ifdef __NR__newselect 251#ifdef __NR__newselect
249 SC_ALLOW(__NR__newselect), 252 SC_ALLOW(__NR__newselect),
250#endif 253#endif