diff options
| author | David Goulet <dgoulet@torproject.org> | 2022-03-28 09:44:31 -0400 |
|---|---|---|
| committer | David Goulet <dgoulet@torproject.org> | 2022-03-28 09:44:31 -0400 |
| commit | b882b8d5d4b6c76e41fdf316b58fc26330ec7198 (patch) | |
| tree | 7d5d6c74d580efed2f7a52310a4ac6d38b75c498 | |
| parent | 3dee8a597f0639cc2f388103af3cdb12633fb575 (diff) | |
| parent | de3872656a8d3a79ca3d5fc55f1b64c4862b4c8a (diff) | |
| download | tor-b882b8d5d4b6c76e41fdf316b58fc26330ec7198.tar.gz tor-b882b8d5d4b6c76e41fdf316b58fc26330ec7198.zip | |
Merge branch 'tor-gitlab/mr/556' into maint-0.4.5
| -rw-r--r-- | changes/clone3-sandbox | 3 | ||||
| -rw-r--r-- | src/lib/sandbox/sandbox.c | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/changes/clone3-sandbox b/changes/clone3-sandbox new file mode 100644 index 0000000000..dac8fe72da --- /dev/null +++ b/changes/clone3-sandbox @@ -0,0 +1,3 @@ + o Minor features (linux seccomp2 sandbox): + - Permit the clone3 syscall, which is apparently used in glibc-2.34 and + later. Closes ticket 40590. diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c index fc90dbe062..e6e556eb59 100644 --- a/src/lib/sandbox/sandbox.c +++ b/src/lib/sandbox/sandbox.c @@ -152,6 +152,9 @@ static int filter_nopar_gen[] = { SCMP_SYS(close), SCMP_SYS(clone), SCMP_SYS(dup), +#ifdef __NR_clone3 + SCMP_SYS(clone3), +#endif SCMP_SYS(epoll_create), SCMP_SYS(epoll_wait), #ifdef __NR_epoll_pwait |