mirror of
https://github.com/openssh/openssh-portable
synced 2025-12-06 15:45:09 +00:00
add futex(2) syscall to seccomp sandbox
Apparently needed for some glibc/openssl combinations. Patch from Arkadiusz Miśkiewicz
This commit is contained in:
@@ -166,6 +166,9 @@ static const struct sock_filter preauth_insns[] = {
|
||||
#ifdef __NR_exit_group
|
||||
SC_ALLOW(__NR_exit_group),
|
||||
#endif
|
||||
#ifdef __NR_futex
|
||||
SC_ALLOW(__NR_futex),
|
||||
#endif
|
||||
#ifdef __NR_geteuid
|
||||
SC_ALLOW(__NR_geteuid),
|
||||
#endif
|
||||
|
||||
Reference in New Issue
Block a user