tor

commit d14af825ce9b2dbacdc11aa73340458bfef5b190
parent 4e6e2aa05d9848494c9f8159eb969c8f9266b957
Author: David Goulet <dgoulet@torproject.org>
Date:   Mon, 28 Mar 2022 09:45:16 -0400

Merge branch 'maint-0.4.5' into maint-0.4.6

Diffstat:
A
changes/clone3-sandbox
 | 
3
+++
M
src/lib/sandbox/sandbox.c
 | 
3
+++

2 files changed, 6 insertions(+), 0 deletions(-)
diff --git a/changes/clone3-sandbox b/changes/clone3-sandbox
@@ -0,0 +1,3 @@
+  o Minor features (linux seccomp2 sandbox):
+    - Permit the clone3 syscall, which is apparently used in glibc-2.34 and
+      later. Closes ticket 40590.
diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
@@ -152,6 +152,9 @@ static int filter_nopar_gen[] = {
     SCMP_SYS(close),
     SCMP_SYS(clone),
     SCMP_SYS(dup),
+#ifdef __NR_clone3
+    SCMP_SYS(clone3),
+#endif
     SCMP_SYS(epoll_create),
     SCMP_SYS(epoll_wait),
 #ifdef __NR_epoll_pwait