From c80c5e338c19964755f277b54b390016f5c829a4 Mon Sep 17 00:00:00 2001 From: Darren Tucker Date: Mon, 16 Dec 2019 13:55:56 +1100 Subject: Allow clock_nanosleep_time64 in seccomp sandbox. Needed on Linux ARM. bz#3100, patch from jjelen@redhat.com. Origin: upstream, https://anongit.mindrot.org/openssh.git/commit/?id=5af6fd5461bb709304e6979c8b7856c7af921c9e Last-Update: 2020-01-11 Patch-Name: sandbox-seccomp-clock_nanosleep_time64.patch --- sandbox-seccomp-filter.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index be2397671..3ef30c9d5 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -245,6 +245,9 @@ static const struct sock_filter preauth_insns[] = { #ifdef __NR_clock_nanosleep SC_ALLOW(__NR_clock_nanosleep), #endif +#ifdef __NR_clock_nanosleep_time64 + SC_ALLOW(__NR_clock_nanosleep_time64), +#endif #ifdef __NR__newselect SC_ALLOW(__NR__newselect), #endif