openssh/openssh-7.7p1-seccomp_stat.patch

# HG changeset patch
# Parent  5034ae16f6a5c9c7151d931dc1cce2a541fe010e
Allow the stat() syscall for OpenSSL re-seed patch
(which causes OpenSSL use stat() on some file)

bnc#912436

diff --git a/openssh-7.7p1/sandbox-seccomp-filter.c b/openssh-7.7p1/sandbox-seccomp-filter.c
--- openssh-7.7p1/sandbox-seccomp-filter.c
+++ openssh-7.7p1/sandbox-seccomp-filter.c
@@ -224,16 +224,19 @@ static const struct sock_filter preauth_
 	SC_ALLOW(__NR_select),
 #endif
 #ifdef __NR_shutdown
 	SC_ALLOW(__NR_shutdown),
 #endif
 #ifdef __NR_sigprocmask
 	SC_ALLOW(__NR_sigprocmask),
 #endif
+#ifdef __NR_stat
+	SC_ALLOW(__NR_stat),
+#endif
 #ifdef __NR_time
 	SC_ALLOW(__NR_time),
 #endif
 #ifdef __NR_write
 	SC_ALLOW(__NR_write),
 #endif
 #ifdef __NR_socketcall
 	SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN),
Accepting request 642573 from home:scarabeus_iv:branches:network - Update to 7.8p1: * no actual changes for the askpass - Format with spec-cleaner - Respect cflags - Use gtk3 rather than gtk2 which is being phased out - Remove the mention of the SLE12 in the README.SUSE - Install firewall rules only when really needed (<SLE15) - Version update to 7.8p1: * For most details see release notes file * ssh-keygen(1): write OpenSSH format private keys by default instead of using OpenSSL's PEM format - Rebase patches to apply on 7.8p1 release: * openssh-7.7p1-fips.patch * openssh-7.7p1-cavstest-kdf.patch * openssh-7.7p1-fips_checks.patch * openssh-7.7p1-gssapi_key_exchange.patch * openssh-7.7p1-audit.patch * openssh-7.7p1-openssl_1.1.0.patch * openssh-7.7p1-ldap.patch * openssh-7.7p1-IPv6_X_forwarding.patch * openssh-7.7p1-sftp_print_diagnostic_messages.patch * openssh-7.7p1-disable_short_DH_parameters.patch * openssh-7.7p1-hostname_changes_when_forwarding_X.patch * openssh-7.7p1-pam_check_locks.patch * openssh-7.7p1-seed-prng.patch * openssh-7.7p1-systemd-notify.patch * openssh-7.7p1-X11_trusted_forwarding.patch - Dropped patches: OBS-URL: https://build.opensuse.org/request/show/642573 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=153 2018-10-17 10:57:56 +02:00			`# HG changeset patch`
			`# Parent 5034ae16f6a5c9c7151d931dc1cce2a541fe010e`
			`Allow the stat() syscall for OpenSSL re-seed patch`
			`(which causes OpenSSL use stat() on some file)`

			`bnc#912436`

			`diff --git a/openssh-7.7p1/sandbox-seccomp-filter.c b/openssh-7.7p1/sandbox-seccomp-filter.c`
			`--- openssh-7.7p1/sandbox-seccomp-filter.c`
			`+++ openssh-7.7p1/sandbox-seccomp-filter.c`
			`@@ -224,16 +224,19 @@ static const struct sock_filter preauth_`
			`SC_ALLOW(__NR_select),`
			`#endif`
			`#ifdef __NR_shutdown`
			`SC_ALLOW(__NR_shutdown),`
			`#endif`
			`#ifdef __NR_sigprocmask`
			`SC_ALLOW(__NR_sigprocmask),`
			`#endif`
			`+#ifdef __NR_stat`
			`+ SC_ALLOW(__NR_stat),`
			`+#endif`
			`#ifdef __NR_time`
			`SC_ALLOW(__NR_time),`
			`#endif`
			`#ifdef __NR_write`
			`SC_ALLOW(__NR_write),`
			`#endif`
			`#ifdef __NR_socketcall`
			`SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN),`