Bugzilla – Attachment 3668 Details for
Bug 3537
OpenSSH build failed
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
This patch worked.
file_3537.txt (text/plain), 1.48 KB, created by
John
on 2023-02-10 23:27:54 AEDT
(
hide
)
Description:
This patch worked.
Filename:
MIME Type:
Creator:
John
Created:
2023-02-10 23:27:54 AEDT
Size:
1.48 KB
patch
obsolete
>diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c >index 78c2662..23b40b6 100644 >--- a/sandbox-seccomp-filter.c >+++ b/sandbox-seccomp-filter.c >@@ -189,10 +189,14 @@ > #endif /* __NR_futex || __NR_futex_time64 */ > > #if defined(__NR_mmap) || defined(__NR_mmap2) >+# ifdef MAP_FIXED_NOREPLACE >+# define SC_MMAP_FLAGS MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED|MAP_FIXED_NOREPLACE >+# else >+# define SC_MMAP_FLAGS MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED >+# endif /* MAP_FIXED_NOREPLACE */ > /* Use this for both __NR_mmap and __NR_mmap2 variants */ > # define SC_MMAP(_nr) \ >- SC_DENY_UNLESS_ARG_MASK(_nr, 3, \ >- MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED|MAP_FIXED_NOREPLACE, EINVAL), \ >+ SC_DENY_UNLESS_ARG_MASK(_nr, 3, SC_MMAP_FLAGS, EINVAL), \ > SC_ALLOW_ARG_MASK(_nr, 2, PROT_READ|PROT_WRITE|PROT_NONE) > #endif /* __NR_mmap || __NR_mmap2 */ > >@@ -308,11 +312,21 @@ static const struct sock_filter preauth_insns[] = { > #endif > #ifdef __NR_madvise > SC_ALLOW_ARG(__NR_madvise, 2, MADV_NORMAL), >+# ifdef MADV_FREE > SC_ALLOW_ARG(__NR_madvise, 2, MADV_FREE), >+# endif >+# ifdef MADV_DONTNEED > SC_ALLOW_ARG(__NR_madvise, 2, MADV_DONTNEED), >+# endif >+# ifdef MADV_DONTFORK > SC_ALLOW_ARG(__NR_madvise, 2, MADV_DONTFORK), >+# endif >+# ifdef MADV_DONTDUMP > SC_ALLOW_ARG(__NR_madvise, 2, MADV_DONTDUMP), >+# endif >+# ifdef MADV_WIPEONFORK > SC_ALLOW_ARG(__NR_madvise, 2, MADV_WIPEONFORK), >+# endif > SC_DENY(__NR_madvise, EINVAL), > #endif > #ifdef __NR_mmap
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 3537
:
3659
|
3660
|
3661
|
3662
| 3668