tor

commit c81cb588db6c5176c7423b1a2f98218a8989b5dd
parent b9c7c61ea5233854ff83257a8bc530b7e0a50351
Author: Nick Mathewson <nickm@torproject.org>
Date:   Wed, 26 Feb 2020 15:17:12 -0500

Allow unlinkat() in the seccomp2 sandbox

Closes ticket 33346.

Diffstat:
A
changes/ticket33346
 | 
3
+++
M
src/lib/sandbox/sandbox.c
 | 
3
+++

2 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/changes/ticket33346 b/changes/ticket33346
@@ -0,0 +1,3 @@
+  o Minor features (linux seccomp2 sandbox):
+    - Permit the unlinkat() syscall, which some Libc implementations
+      use to implement unlink(). Closes ticket 33346.
diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
@@ -269,6 +269,9 @@ static int filter_nopar_gen[] = {
     SCMP_SYS(recvfrom),
     SCMP_SYS(sendto),
     SCMP_SYS(unlink),
+#ifdef __NR_unlinkat
+    SCMP_SYS(unlinkat),
+#endif
     SCMP_SYS(poll)
 };