From 7e5cec6070673e9f9785ffc749837ada22fbe99f Mon Sep 17 00:00:00 2001 From: Damien Miller Date: Fri, 31 Jan 2014 09:25:34 +1100 Subject: - (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2) syscall from sandboxes; it may be called by packet_close. --- sandbox-systrace.c | 1 + 1 file changed, 1 insertion(+) (limited to 'sandbox-systrace.c') diff --git a/sandbox-systrace.c b/sandbox-systrace.c index 53fbd47cb..3d4677838 100644 --- a/sandbox-systrace.c +++ b/sandbox-systrace.c @@ -66,6 +66,7 @@ static const struct sandbox_policy preauth_policy[] = { { SYS_munmap, SYSTR_POLICY_PERMIT }, { SYS_read, SYSTR_POLICY_PERMIT }, { SYS_select, SYSTR_POLICY_PERMIT }, + { SYS_shutdown, SYSTR_POLICY_PERMIT }, { SYS_sigprocmask, SYSTR_POLICY_PERMIT }, { SYS_write, SYSTR_POLICY_PERMIT }, { -1, -1 } -- cgit v1.2.3