Attachment 3056 Details for Bug 2752 – Allow-getuid-and-geteuid-calls

[patch] Allow-getuid-and-geteuid-calls

0002-Allow-getuid-and-geteuid-calls.patch (text/plain), 1.08 KB, created by Damien Miller on 2017-09-22 09:30:13 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Damien Miller

Created: 2017-09-22 09:30:13 AEST

Size: 1.08 KB

patch

obsolete

>From 572add8c5a9abf90653e6561622bf3821976cf28 Mon Sep 17 00:00:00 2001
>From: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>
>Date: Tue, 9 May 2017 13:31:05 -0300
>Subject: [PATCH 2/3] Allow getuid and geteuid calls
>
>getuid and geteuid are needed when using an openssl engine that calls a
>crypto card, e.g. ICA (libica).
>Those syscalls are also needed by the distros for audit code.
>
>Signed-off-by: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>
>---
> sandbox-seccomp-filter.c | 12 ++++++++++++
> 1 file changed, 12 insertions(+)
>
>diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
>index 6e7de31..e86aa2c 100644
>--- a/sandbox-seccomp-filter.c
>+++ b/sandbox-seccomp-filter.c
>@@ -175,6 +175,18 @@ static const struct sock_filter preauth_insns[] = {
> #ifdef __NR_getpid
> 	SC_ALLOW(__NR_getpid),
> #endif
>+#ifdef __NR_getuid
>+	SC_ALLOW(__NR_getuid),
>+#endif
>+#ifdef __NR_getuid32
>+	SC_ALLOW(__NR_getuid32),
>+#endif
>+#ifdef __NR_geteuid
>+	SC_ALLOW(__NR_geteuid),
>+#endif
>+#ifdef __NR_geteuid32
>+	SC_ALLOW(__NR_geteuid32),
>+#endif
> #ifdef __NR_getrandom
> 	SC_ALLOW(__NR_getrandom),
> #endif
>-- 
>1.9.1
>

Flags:

dtucker: ok+

Actions: View | Diff

Attachments on bug 2752: 3025 | 3055 | 3056 | 3057