2019-11-14 08:18:41 +00:00
|
|
|
commit 7e929163ed40f9ce90060a3ca6df558c3d901379
|
|
|
|
|
Author: Jakub Jelen <jjelen@redhat.com>
|
|
|
|
|
Date: Wed Nov 13 12:57:05 2019 +0100
|
|
|
|
|
|
|
|
|
|
seccomp: Allow clock_nanosleep() to make OpenSSH working with latest glibc
|
|
|
|
|
|
|
|
|
|
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
|
|
|
|
|
index b5cda70b..be239767 100644
|
|
|
|
|
--- a/sandbox-seccomp-filter.c
|
|
|
|
|
+++ b/sandbox-seccomp-filter.c
|
|
|
|
|
@@ -242,6 +242,9 @@ static const struct sock_filter preauth_insns[] = {
|
|
|
|
|
#ifdef __NR_nanosleep
|
|
|
|
|
SC_ALLOW(__NR_nanosleep),
|
|
|
|
|
#endif
|
|
|
|
|
+#ifdef __NR_clock_nanosleep
|
|
|
|
|
+ SC_ALLOW(__NR_clock_nanosleep),
|
|
|
|
|
+#endif
|
|
|
|
|
#ifdef __NR__newselect
|
|
|
|
|
SC_ALLOW(__NR__newselect),
|
|
|
|
|
#endif
|
|
|
|
|
|
2019-11-27 10:15:00 +00:00
|
|
|
commit 500c30eaf88f26e4a74b06717fe04afec7a7516f
|
|
|
|
|
Author: Jakub Jelen <jjelen@redhat.com>
|
|
|
|
|
Date: Wed Nov 27 11:06:55 2019 +0100
|
|
|
|
|
|
|
|
|
|
sandbox-seccomp: Allow clock_nanosleep on ARM
|
|
|
|
|
|
|
|
|
|
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
|
|
|
|
|
index be239767..3ef30c9d 100644
|
|
|
|
|
--- a/sandbox-seccomp-filter.c
|
|
|
|
|
+++ b/sandbox-seccomp-filter.c
|
2020-02-02 23:50:34 +00:00
|
|
|
@@ -245,6 +245,12 @@ static const struct sock_filter preauth_insns[] = {
|
2019-11-27 10:15:00 +00:00
|
|
|
#ifdef __NR_clock_nanosleep
|
|
|
|
|
SC_ALLOW(__NR_clock_nanosleep),
|
|
|
|
|
#endif
|
|
|
|
|
+#ifdef __NR_clock_nanosleep_time64
|
|
|
|
|
+ SC_ALLOW(__NR_clock_nanosleep_time64),
|
2020-02-02 23:50:34 +00:00
|
|
|
+#endif
|
|
|
|
|
+#ifdef __NR_clock_gettime64
|
|
|
|
|
+ SC_ALLOW(__NR_clock_gettime64),
|
2019-11-27 10:15:00 +00:00
|
|
|
+#endif
|
|
|
|
|
#ifdef __NR__newselect
|
|
|
|
|
SC_ALLOW(__NR__newselect),
|
|
|
|
|
#endif
|
|
|
|
|
|
