pool/openssh
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6045514505
openssh/openssh-6.6p1-seccomp_getuid.patch

30 lines
1000 B
Diff
Raw Normal View History

Accepting request 222710 from home:pcerny:factory - re-enabling the seccomp sandbox (allowing use of getuid the syscall) OBS-URL: https://build.opensuse.org/request/show/222710 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=66
2014-02-18 14:04:57 +01:00
# HG changeset patch
Accepting request 231427 from home:pcerny:factory - curve25519 key exchange fix (-curve25519-6.6.1p1.patch) - patch re-ordering (-audit3-key_auth_usage-fips.patch, -audit4-kex_results-fips.patch) OBS-URL: https://build.opensuse.org/request/show/231427 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=80
2014-04-25 15:11:58 +02:00
# Parent bde6f1a808f345e141a976ebc3e37903c81a09cb
Accepting request 222710 from home:pcerny:factory - re-enabling the seccomp sandbox (allowing use of getuid the syscall) OBS-URL: https://build.opensuse.org/request/show/222710 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=66
2014-02-18 14:04:57 +01:00
add 'getuid' syscall to list of allowed ones to prevent the sanboxed thread
from being killed by the seccomp filter
restore factory state, so we can fix bugs. old stuff is still in the old revisions OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=98
2016-04-06 13:34:51 +02:00
diff --git a/openssh-6.6p1/sandbox-seccomp-filter.c b/openssh-6.6p1/sandbox-seccomp-filter.c
--- a/openssh-6.6p1/sandbox-seccomp-filter.c
+++ b/openssh-6.6p1/sandbox-seccomp-filter.c
@@ -85,16 +85,20 @@ static const struct sock_filter preauth_
offsetof(struct seccomp_data, arch)),
BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SECCOMP_AUDIT_ARCH, 1, 0),
BPF_STMT(BPF_RET+BPF_K, SECCOMP_FILTER_FAIL),
/* Load the syscall number for checking. */
BPF_STMT(BPF_LD+BPF_W+BPF_ABS,
offsetof(struct seccomp_data, nr)),
SC_DENY(open, EACCES),
Accepting request 222710 from home:pcerny:factory - re-enabling the seccomp sandbox (allowing use of getuid the syscall) OBS-URL: https://build.opensuse.org/request/show/222710 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=66
2014-02-18 14:04:57 +01:00
SC_ALLOW(getpid),
+ SC_ALLOW(getuid),
- openssh-6.5p1-seccomp_getuid.patch: re-enabling the seccomp sandbox (allowing use of the getuid syscall) (bnc#864171) OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=68
2014-02-19 14:30:54 +01:00
+#ifdef __NR_getuid32
OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=67
2014-02-19 14:22:51 +01:00
+ SC_ALLOW(getuid32),
- openssh-6.5p1-seccomp_getuid.patch: re-enabling the seccomp sandbox (allowing use of the getuid syscall) (bnc#864171) OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=68
2014-02-19 14:30:54 +01:00
+#endif
Accepting request 222710 from home:pcerny:factory - re-enabling the seccomp sandbox (allowing use of getuid the syscall) OBS-URL: https://build.opensuse.org/request/show/222710 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=66
2014-02-18 14:04:57 +01:00
SC_ALLOW(gettimeofday),
restore factory state, so we can fix bugs. old stuff is still in the old revisions OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=98
2016-04-06 13:34:51 +02:00
SC_ALLOW(clock_gettime),
#ifdef __NR_time /* not defined on EABI ARM */
SC_ALLOW(time),
Accepting request 222710 from home:pcerny:factory - re-enabling the seccomp sandbox (allowing use of getuid the syscall) OBS-URL: https://build.opensuse.org/request/show/222710 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=66
2014-02-18 14:04:57 +01:00
#endif
restore factory state, so we can fix bugs. old stuff is still in the old revisions OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=98
2016-04-06 13:34:51 +02:00
SC_ALLOW(read),
SC_ALLOW(write),
SC_ALLOW(close),
Reference in New Issue Copy Permalink