mirrors/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2025-02-23 14:40:51 +01:00
Code Issues Projects Releases Wiki Activity

Fix another seccomp2 issue

Browse source 
Allow pipe() and pipe2() syscalls; we need these when eventfd2()
support is missing. Fixes bug 16363; bugfix on 0.2.6.3-alpha.  Patch
from "teor".
This commit is contained in:
Nick Mathewson 2015-06-15 10:13:11 -04:00
parent 1eb2c0cbd3
commit 59fa0c2d99
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
changes/bug16363 Normal file
View file

@ -0,0 +1,4 @@
o Minor bugfixes (Linux seccomp2 sandbox):
- Allow pipe() and pipe2() syscalls; we need these when eventfd2()
support is missing. Fixes bug 16363; bugfix on 0.2.6.3-alpha.
Patch from "teor".

8
src/common/sandbox.c
View file

@ -129,7 +129,15 @@ static int filter_nopar_gen[] = {
SCMP_SYS(clone), SCMP_SYS(clone),
SCMP_SYS(epoll_create), SCMP_SYS(epoll_create),
SCMP_SYS(epoll_wait), SCMP_SYS(epoll_wait),
#ifdef HAVE_EVENTFD
SCMP_SYS(eventfd2), SCMP_SYS(eventfd2),
#endif
#ifdef HAVE_PIPE2
SCMP_SYS(pipe2),
#endif
#ifdef HAVE_PIPE
SCMP_SYS(pipe),
#endif
SCMP_SYS(fcntl), SCMP_SYS(fcntl),
SCMP_SYS(fstat), SCMP_SYS(fstat),
#ifdef __NR_fstat64 #ifdef __NR_fstat64