upstream commit

Permit kbind(2) use in the sandbox now, to ease testing
 of ld.so work using it

reminded by miod@, ok deraadt@

Upstream-ID: 523922e4d1ba7a091e3824e77a8a3c818ee97413

1 files changed, 4 insertions, 1 deletions

diff --git a/sandbox-systrace.c b/sandbox-systrace.c
index 03b0d40cc..3830ed16c 100644
--- a/sandbox-systrace.c
+++ b/sandbox-systrace.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sandbox-systrace.c,v 1.16 2015/06/29 22:35:12 djm Exp $ */
+/* $OpenBSD: sandbox-systrace.c,v 1.17 2015/07/27 16:29:23 guenther Exp $ */
 /*
  * Copyright (c) 2011 Damien Miller <djm@mindrot.org>
  *
@@ -63,6 +63,9 @@ static const struct sandbox_policy preauth_policy[] = {
         { SYS_getpid, SYSTR_POLICY_PERMIT },
         { SYS_getpgid, SYSTR_POLICY_PERMIT },
         { SYS_gettimeofday, SYSTR_POLICY_PERMIT },
+#ifdef SYS_kbind
+        { SYS_kbind, SYSTR_POLICY_PERMIT },
+#endif
         { SYS_madvise, SYSTR_POLICY_PERMIT },
         { SYS_mmap, SYSTR_POLICY_PERMIT },
         { SYS_mprotect, SYSTR_POLICY_PERMIT },