forked from pool/vsftpd
10243a939a
- Move the enabling of timeofday and alarm one level deeper to be sure it is whitelisted everytime. Also should possibly fix bnc#872215. - Updated patch: * vsftpd-enable-gettimeofday-sec.patch - Remove forking from service type as it hangs in endless loop. - Fix warning about dangling symlink on rcvsftpd from rpmlint and remove also clean section while at it. - Add patch to allow gettimeofday and alarm calls with seccomp enabled. bnc#870122 - Added patch: * vsftpd-enable-gettimeofday-sec.patch - Specify that the service type is forking - changed license to SUSE-GPL-2.0-with-openssl-exception * suggested by legal team - add allow_root_squashed_chroot option to enable chroot on nsf mounted with squash_root option (fate#311051) * vsftpd-root-squashed-chroot.patch OBS-URL: https://build.opensuse.org/request/show/229627 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=59
19 lines
600 B
Diff
19 lines
600 B
Diff
diff -urN vsftpd-3.0.2/seccompsandbox.c vsftpd-3.0.2.new/seccompsandbox.c
|
|
--- vsftpd-3.0.2/seccompsandbox.c 2012-09-18 08:52:30.000000000 +0200
|
|
+++ vsftpd-3.0.2.new/seccompsandbox.c 2014-04-10 14:55:30.855607231 +0200
|
|
@@ -303,6 +303,14 @@
|
|
allow_nr(__NR_rt_sigreturn); /* Used to handle SIGPIPE. */
|
|
allow_nr(__NR_restart_syscall);
|
|
allow_nr(__NR_close);
|
|
+
|
|
+ /*
|
|
+ * Calls to alarm and date
|
|
+ * Seems to be some part of the logging
|
|
+ * wrt bnc#870122
|
|
+ */
|
|
+ allow_nr(__NR_alarm);
|
|
+ allow_nr(__NR_gettimeofday);
|
|
|
|
/* Always need to be able to exit ! */
|
|
allow_nr(__NR_exit_group);
|