| Summary: | Update seccomp filter on ARM to match current glibc | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Portable OpenSSH | Reporter: | Jakub Jelen <jjelen> | ||||
| Component: | sshd | Assignee: | Assigned to nobody <unassigned-bugs> | ||||
| Status: | CLOSED FIXED | ||||||
| Severity: | enhancement | CC: | dtucker | ||||
| Priority: | P5 | Keywords: | patch | ||||
| Version: | 8.1p1 | ||||||
| Hardware: | ARM | ||||||
| OS: | Linux | ||||||
| Bug Depends on: | |||||||
| Bug Blocks: | 3079 | ||||||
| Attachments: |
|
||||||
For more information, see the following Fedora bug: https://bugzilla.redhat.com/show_bug.cgi?id=1777054 Applied, thanks. closing resolved bugs as of 8.6p1 release |
Created attachment 3340 [details] sandbox-seccomp: Allow clock_nanosleep on ARM As a follow-up on #3093 the ARM architecture is using a bit different syscall clock_nanosleep_time64() for the same purpose, which makes the previous fix incomplete. The attached patch adds the arm alternative to the whitelist. My searches around did not show any other syscall that could be used on other architectures at this moment.