From 7e5cec6070673e9f9785ffc749837ada22fbe99f Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Fri, 31 Jan 2014 09:25:34 +1100
Subject:  - (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow
 shutdown(2)    syscall from sandboxes; it may be called by packet_close.

---
 sandbox-seccomp-filter.c | 1 +
 1 file changed, 1 insertion(+)

(limited to 'sandbox-seccomp-filter.c')

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index 2f73067e1..dbda60bab 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -98,6 +98,7 @@ static const struct sock_filter preauth_insns[] = {
 	SC_ALLOW(read),
 	SC_ALLOW(write),
 	SC_ALLOW(close),
+	SC_ALLOW(shutdown),
 	SC_ALLOW(brk),
 	SC_ALLOW(poll),
 #ifdef __NR__newselect
-- 
cgit v1.2.3