Add a sandbox fallback mechanism, so that behaviour on Linux depends on

whether the running system's kernel has seccomp_filter support, not the
build system's kernel (forwarded upstream as
https://bugzilla.mindrot.org/show_bug.cgi?id=2011).

1 files changed, 1 insertions, 1 deletions

diff --git a/sshd.c b/sshd.c
index e032c1720..038fb2a56 100644
--- a/sshd.c
+++ b/sshd.c
@@ -631,7 +631,7 @@ privsep_preauth(Authctxt *authctxt)
 {
         int status;
         pid_t pid;
-        struct ssh_sandbox *box = NULL;
+        void *box = NULL;
 
         /* Set up unprivileged child process to deal with network data */
         pmonitor = monitor_init();