From c4be6dfeabc8d42ecb6ccea8ca44d1ff0835071a Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Wed, 18 Apr 2018 10:25:42 -0400 Subject: Permit the nanosleep system call in the seccomp2 callbox Fixes bug 24969; bugfix on 0.2.5.1-alpha when the sandbox was introduced. --- src/common/sandbox.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src') diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 87fe08e881..3d27ea66b5 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -185,6 +185,9 @@ static int filter_nopar_gen[] = { SCMP_SYS(mmap), #endif SCMP_SYS(munmap), +#ifdef __NR_nanosleep + SCMP_SYS(nanosleep), +#endif #ifdef __NR_prlimit SCMP_SYS(prlimit), #endif -- cgit v1.2.3-54-g00ecf