forked from pool/tracker
a44f725097
I think our users are better served with non-crashing tracker than sandboxing, even if thats a sec feature and needed for some of flatpak features, until upstream sorts this out, I recommend we disabled it OBS-URL: https://build.opensuse.org/request/show/453192 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/tracker?expand=0&rev=113
28 lines
848 B
Diff
28 lines
848 B
Diff
From 163aea34323d932d6bad6e14ca7d5e19ff2c766a Mon Sep 17 00:00:00 2001
|
|
From: Carlos Garnacho <carlosg@gnome.org>
|
|
Date: Thu, 19 Jan 2017 13:07:40 +0100
|
|
Subject: libtracker-common: Whitelist waitid/waitpid/wait4
|
|
|
|
https://bugzilla.gnome.org/show_bug.cgi?id=776117
|
|
---
|
|
src/libtracker-common/tracker-seccomp.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/src/libtracker-common/tracker-seccomp.c b/src/libtracker-common/tracker-seccomp.c
|
|
index c46dfa6..0c75895 100644
|
|
--- a/src/libtracker-common/tracker-seccomp.c
|
|
+++ b/src/libtracker-common/tracker-seccomp.c
|
|
@@ -103,6 +103,9 @@ tracker_seccomp_init (void)
|
|
ALLOW_RULE (sched_yield);
|
|
ALLOW_RULE (sched_getaffinity);
|
|
ALLOW_RULE (nanosleep);
|
|
+ ALLOW_RULE (waitid);
|
|
+ ALLOW_RULE (waitpid);
|
|
+ ALLOW_RULE (wait4);
|
|
/* Main loops */
|
|
ALLOW_RULE (poll);
|
|
ALLOW_RULE (ppoll);
|
|
--
|
|
cgit v0.12
|
|
|