From 1c5b4bc827f4abc3e65888cda061ad5edf1b8c7c Mon Sep 17 00:00:00 2001 From: Darren Tucker Date: Fri, 13 Apr 2018 16:23:57 +1000 Subject: [PATCH] Allow nanosleep in preauth privsep child. The new timing attack mitigation code uses nanosleep in the preauth codepath, allow in systrace andbox too. --- sandbox-systrace.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sandbox-systrace.c b/sandbox-systrace.c index b4d8d04ca..add4c46d0 100644 --- a/sandbox-systrace.c +++ b/sandbox-systrace.c @@ -59,6 +59,7 @@ static const struct sandbox_policy preauth_policy[] = { { SYS_getpgid, SYSTR_POLICY_PERMIT }, { SYS_clock_gettime, SYSTR_POLICY_PERMIT }, { SYS_gettimeofday, SYSTR_POLICY_PERMIT }, + { SYS_nanosleep, SYSTR_POLICY_PERMIT }, { SYS_sigprocmask, SYSTR_POLICY_PERMIT }, #ifdef SYS_getentropy