Attachment 3470 Details for Bug 3260 – seccomp additions for glibc 2.33

[patch] seccomp additions for glibc 2.33

0001-seccomp-allow-futex_time64-and-pselect6_time64-on-Li.patch (text/plain), 1.01 KB, created by Nick Alcock on 2021-02-11 00:05:20 AEDT

(hide)

Description:

Filename:

MIME Type:

Creator: Nick Alcock

Created: 2021-02-11 00:05:20 AEDT

Size: 1.01 KB

patch

obsolete

>From 41f221b4962b835a4f24a430d1ce0d90b90305ac Mon Sep 17 00:00:00 2001
>From: Nick Alcock <nick.alcock@oracle.com>
>Date: Mon, 8 Feb 2021 15:10:00 +0000
>Subject: [PATCH] seccomp: allow futex_time64 and pselect6_time64 on Linux.
>
>Needed on many 32-bit Linux platforms using glibc 2.33.
>---
> sandbox-seccomp-filter.c | 6 ++++++
> 1 file changed, 6 insertions(+)
>
>diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
>index e0768c06..46752c0b 100644
>--- a/sandbox-seccomp-filter.c
>+++ b/sandbox-seccomp-filter.c
>@@ -204,6 +204,9 @@ static const struct sock_filter preauth_insns[] = {
> #ifdef __NR_futex
> 	SC_ALLOW(__NR_futex),
> #endif
>+#ifdef __NR_futex
>+	SC_ALLOW(__NR_futex_time64),
>+#endif
> #ifdef __NR_geteuid
> 	SC_ALLOW(__NR_geteuid),
> #endif
>@@ -267,6 +270,9 @@ static const struct sock_filter preauth_insns[] = {
> #ifdef __NR_pselect6
> 	SC_ALLOW(__NR_pselect6),
> #endif
>+#ifdef __NR_pselect6_time64
>+	SC_ALLOW(__NR_pselect6_time64),
>+#endif
> #ifdef __NR_read
> 	SC_ALLOW(__NR_read),
> #endif
>-- 
>2.30.0.252.gc27e85e57d
>

Actions: View | Diff

Attachments on bug 3260: 3470 | 3471