commit 0d02c053f84cbbca6c373ccea5b2174e6c62e3c4
parent 9638c6d7a7c9de5336eab16eb013f97a62c75022
Author: George Kadianakis <desnacked@riseup.net>
Date: Wed, 1 Jul 2020 12:55:03 +0300
Merge branch 'maint-0.4.3' into maint-0.4.4
Diffstat:
2 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/changes/ticket33346 b/changes/ticket33346
@@ -0,0 +1,3 @@
+ o Minor features (linux seccomp2 sandbox):
+ - Permit the unlinkat() syscall, which some Libc implementations
+ use to implement unlink(). Closes ticket 33346.
diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
@@ -279,6 +279,9 @@ static int filter_nopar_gen[] = {
SCMP_SYS(recvfrom),
SCMP_SYS(sendto),
SCMP_SYS(unlink),
+#ifdef __NR_unlinkat
+ SCMP_SYS(unlinkat),
+#endif
SCMP_SYS(poll)
};