tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-07-26 15:24:47 +02:00
Code Issues Packages Projects Releases Wiki Activity

Allow (but return EACCES) fstatat64 in sandbox.

Browse Source 
This is apparently used in some configurations of OpenSSL when glibc
has getrandom().  bz#3276, patch from Kris Karas, ok djm@
This commit is contained in:
Darren Tucker 2021-03-12 15:58:57 +11:00
parent 1cd67ee15c
commit 82fef71e20
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sandbox-seccomp-filter.c
View File

@ -154,6 +154,9 @@ static const struct sock_filter preauth_insns[] = {
#ifdef __NR_fstat64 #ifdef __NR_fstat64
SC_DENY(__NR_fstat64, EACCES), SC_DENY(__NR_fstat64, EACCES),
#endif #endif
#ifdef __NR_fstatat64
SC_DENY(__NR_fstatat64, EACCES),
#endif
#ifdef __NR_open #ifdef __NR_open
SC_DENY(__NR_open, EACCES), SC_DENY(__NR_open, EACCES),
#endif #endif