SHA256
1
0
forked from pool/file
file/file-5.38-allow-readlinkat.dif
Dr. Werner Fink d39430884d Accepting request 761855 from home:msmeissn:branches:Base:System
- file-5.38-allow-readlinkat.dif: allow readlinkat() systemcall,
  reenable sandboxing. (bsc#1160303)

OBS-URL: https://build.opensuse.org/request/show/761855
OBS-URL: https://build.opensuse.org/package/show/Base:System/file?expand=0&rev=207
2020-01-12 16:03:11 +00:00

15 lines
387 B
Plaintext

Index: file-5.38/src/seccomp.c
===================================================================
--- file-5.38.orig/src/seccomp.c
+++ file-5.38/src/seccomp.c
@@ -202,6 +202,9 @@ enable_sandbox_full(void)
#ifdef __NR_newfstatat
ALLOW_RULE(newfstatat);
#endif
+#ifdef __NR_readlinkat
+ ALLOW_RULE(readlinkat);
+#endif
ALLOW_RULE(open);
ALLOW_RULE(openat);
ALLOW_RULE(pread64);