fe873a1c10
next round of patches - allow X forwarding over IPv4 when IPv6 sockets is not available [openssh-7.2p2-X_forward_with_disabled_ipv6.patch] - do not write PID file when not daemonizing [openssh-7.2p2-no_fork-no_pid_file.patch] - use correct options when invoking login [openssh-7.2p2-login_options.patch] - helper application for retrieving users' public keys from an LDAP server [openssh-7.2p2-ldap.patch] - allow forcing permissions over sftp [openssh-7.2p2-sftp_force_permissions.patch] - do not perform run-time checks for OpenSSL API/ABI change [openssh-7.2p2-disable-openssl-abi-check.patch] - suggest commands for cleaning known hosts file [openssh-7.2p2-host_ident.patch] - sftp home chroot patch [openssh-7.2p2-sftp_homechroot.patch] - ssh sessions auditing [openssh-7.2p2-audit.patch] - enable seccomp sandbox on additional architectures [openssh-7.2p2-additional_seccomp_archs.patch] OBS-URL: https://build.opensuse.org/request/show/432093 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=112
57 lines
1.4 KiB
Diff
57 lines
1.4 KiB
Diff
# HG changeset patch
|
|
# Parent 27b9bd4a1a53a28b5e9eda0a9c013d98f821149b
|
|
Enable the seccomp-bpf sandbox on more architectures
|
|
|
|
upstream commit: b9c50614eba9d90939b2b119b6e1b7e03b462278 (7.3p1)
|
|
Author: Damien Miller <djm@mindrot.org>
|
|
Date: Fri Jul 8 13:59:13 2016 +1000
|
|
|
|
whitelist more architectures for seccomp-bpf
|
|
|
|
bz#2590 - testing and patch from Jakub Jelen
|
|
|
|
diff --git a/openssh-7.2p2/configure.ac b/openssh-7.2p2/configure.ac
|
|
--- a/openssh-7.2p2/configure.ac
|
|
+++ b/openssh-7.2p2/configure.ac
|
|
@@ -818,16 +818,40 @@ main() { if (NSVersionOfRunTimeLibrary("
|
|
seccomp_audit_arch=AUDIT_ARCH_I386
|
|
;;
|
|
arm*-*)
|
|
seccomp_audit_arch=AUDIT_ARCH_ARM
|
|
;;
|
|
aarch64*-*)
|
|
seccomp_audit_arch=AUDIT_ARCH_AARCH64
|
|
;;
|
|
+ s390x-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_S390X
|
|
+ ;;
|
|
+ s390-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_S390
|
|
+ ;;
|
|
+ powerpc64-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_PPC64
|
|
+ ;;
|
|
+ powerpc64le-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_PPC64LE
|
|
+ ;;
|
|
+ mips-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_MIPS
|
|
+ ;;
|
|
+ mipsel-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_MIPSEL
|
|
+ ;;
|
|
+ mips64-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_MIPS64
|
|
+ ;;
|
|
+ mips64el-*)
|
|
+ seccomp_audit_arch=AUDIT_ARCH_MIPSEL64
|
|
+ ;;
|
|
esac
|
|
if test "x$seccomp_audit_arch" != "x" ; then
|
|
AC_MSG_RESULT(["$seccomp_audit_arch"])
|
|
AC_DEFINE_UNQUOTED([SECCOMP_AUDIT_ARCH], [$seccomp_audit_arch],
|
|
[Specify the system call convention in use])
|
|
else
|
|
AC_MSG_RESULT([architecture not supported])
|
|
fi
|