Attachment 3055 Details for Bug 2752 – Allow-flock-and-ipc-syscall-for-s390-architecture

[patch] Allow-flock-and-ipc-syscall-for-s390-architecture

0001-Allow-flock-and-ipc-syscall-for-s390-architecture.patch (text/plain), 1.36 KB, created by Damien Miller on 2017-09-22 09:29:55 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Damien Miller

Created: 2017-09-22 09:29:55 AEST

Size: 1.36 KB

patch

obsolete

>From ad88141f3b46a746499f40f6a798af8b228139dd Mon Sep 17 00:00:00 2001
>From: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>
>Date: Tue, 9 May 2017 10:53:04 -0300
>Subject: [PATCH 1/3] Allow flock and ipc syscall for s390 architecture
>
>In order to use the OpenSSL-ibmpkcs11 engine it is needed to allow flock
>and ipc calls, because this engine calls OpenCryptoki (a PKCS#11
>implementation) which calls the libraries that will communicate with the
>crypto cards. OpenCryptoki makes use of flock and ipc and, as of now,
>this is only need on s390 architecture.
>
>Signed-off-by: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>
>---
> sandbox-seccomp-filter.c | 6 ++++++
> 1 file changed, 6 insertions(+)
>
>diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
>index ca75cc7..6e7de31 100644
>--- a/sandbox-seccomp-filter.c
>+++ b/sandbox-seccomp-filter.c
>@@ -166,6 +166,9 @@ static const struct sock_filter preauth_insns[] = {
> #ifdef __NR_exit_group
> 	SC_ALLOW(__NR_exit_group),
> #endif
>+#if defined(__NR_flock) && defined(__s390__)
>+	SC_ALLOW(__NR_flock),
>+#endif
> #ifdef __NR_getpgid
> 	SC_ALLOW(__NR_getpgid),
> #endif
>@@ -178,6 +181,9 @@ static const struct sock_filter preauth_insns[] = {
> #ifdef __NR_gettimeofday
> 	SC_ALLOW(__NR_gettimeofday),
> #endif
>+#if defined(__NR_ipc) && defined(__s390__)
>+	SC_ALLOW(__NR_ipc),
>+#endif
> #ifdef __NR_madvise
> 	SC_ALLOW(__NR_madvise),
> #endif
>-- 
>1.9.1
>

Actions: View | Diff

Attachments on bug 2752: 3025 | 3055 | 3056 | 3057