openssh/openssh-7.2p2-seccomp_stat.patch

# HG changeset patch
# Parent  51a94ce61ff5c6908d747d8bc5806e18c6f5c114
Allow the stat() syscall for OpenSSL re-seed patch
(which causes OpenSSL use stat() on some file)

bnc#912436

diff --git a/openssh-7.2p2/sandbox-seccomp-filter.c b/openssh-7.2p2/sandbox-seccomp-filter.c
--- a/openssh-7.2p2/sandbox-seccomp-filter.c
+++ b/openssh-7.2p2/sandbox-seccomp-filter.c
@@ -130,16 +130,19 @@ static const struct sock_filter preauth_
 	SC_ALLOW(brk),
 #endif
 #ifdef __NR_clock_gettime
 	SC_ALLOW(clock_gettime),
 #endif
 #ifdef __NR_close
 	SC_ALLOW(close),
 #endif
+#ifdef __NR_stat
+	SC_ALLOW(stat),
+#endif
 #ifdef __NR_exit
 	SC_ALLOW(exit),
 #endif
 #ifdef __NR_exit_group
 	SC_ALLOW(exit_group),
 #endif
 #ifdef __NR_getpgid
 	SC_ALLOW(getpgid),
Accepting request 398802 from home:pcerny:factory - upgrade to 7.2p2 - changing license to 2-clause BSD to match source - enable trusted X11 forwarding by default [-X11_trusted_forwarding] - set UID for lastlog properly [-lastlog] - enable use of PAM by default [-enable_PAM_by_default] - copy command line arguments properly [-saveargv-fix] - do not use pthreads in PAM code [-dont_use_pthreads_in_PAM] - fix paths in documentation [-eal3] - prevent race consitions triggered by SIGALRM [-blocksigalrm] - do send and accept locale environment variables by default [-send_locale] - handle hostnames changes during X forwarding [-hostname_changes_when_forwarding_X] - try to remove xauth cookies on exit [-remove_xauth_cookies_on_exit] - properly format pts names for ?tmp? log files [-pts_names_formatting] - check locked accounts when using PAM [-pam_check_locks] - chenge default PermitRootLogin to 'yes' to prevent unwanted surprises on updates from older versions. See README.SUSE for details [-allow_root_password_login] - Disable DH parameters under 2048 bits by default and allow lowering the limit back to the RFC 4419 specified minimum through an option (bsc#932483, bsc#948902) [-disable_short_DH_parameters] - Add getuid() and stat() syscalls to the seccomp filter OBS-URL: https://build.opensuse.org/request/show/398802 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=103 2016-05-30 03:36:18 +02:00			`# HG changeset patch`
			`# Parent 51a94ce61ff5c6908d747d8bc5806e18c6f5c114`
			`Allow the stat() syscall for OpenSSL re-seed patch`
			`(which causes OpenSSL use stat() on some file)`

			`bnc#912436`

			`diff --git a/openssh-7.2p2/sandbox-seccomp-filter.c b/openssh-7.2p2/sandbox-seccomp-filter.c`
			`--- a/openssh-7.2p2/sandbox-seccomp-filter.c`
			`+++ b/openssh-7.2p2/sandbox-seccomp-filter.c`
			`@@ -130,16 +130,19 @@ static const struct sock_filter preauth_`
			`SC_ALLOW(brk),`
			`#endif`
			`#ifdef __NR_clock_gettime`
			`SC_ALLOW(clock_gettime),`
			`#endif`
			`#ifdef __NR_close`
			`SC_ALLOW(close),`
			`#endif`
			`+#ifdef __NR_stat`
			`+ SC_ALLOW(stat),`
			`+#endif`
			`#ifdef __NR_exit`
			`SC_ALLOW(exit),`
			`#endif`
			`#ifdef __NR_exit_group`
			`SC_ALLOW(exit_group),`
			`#endif`
			`#ifdef __NR_getpgid`
			`SC_ALLOW(getpgid),`