Dr. Werner Fink
d39430884d
- file-5.38-allow-readlinkat.dif: allow readlinkat() systemcall, reenable sandboxing. (bsc#1160303) OBS-URL: https://build.opensuse.org/request/show/761855 OBS-URL: https://build.opensuse.org/package/show/Base:System/file?expand=0&rev=207
15 lines
387 B
Plaintext
15 lines
387 B
Plaintext
Index: file-5.38/src/seccomp.c
|
|
===================================================================
|
|
--- file-5.38.orig/src/seccomp.c
|
|
+++ file-5.38/src/seccomp.c
|
|
@@ -202,6 +202,9 @@ enable_sandbox_full(void)
|
|
#ifdef __NR_newfstatat
|
|
ALLOW_RULE(newfstatat);
|
|
#endif
|
|
+#ifdef __NR_readlinkat
|
|
+ ALLOW_RULE(readlinkat);
|
|
+#endif
|
|
ALLOW_RULE(open);
|
|
ALLOW_RULE(openat);
|
|
ALLOW_RULE(pread64);
|