tor

commit d422a66f8759b2edd8d85df219e8a183058268e8
parent dc90226cc3c7c74164f8feb1f50d2fbcf0941a9d
Author: pmu-ipf <peter.mueller@ipfire.org>
Date:   Sat, 30 Apr 2022 11:10:04 +0000

sandbox: Permit rseq syscall as well

This was found to be necessary in conjunction with glibc 2.35 on Linux. 

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Diffstat:
M
src/lib/sandbox/sandbox.c
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
@@ -227,6 +227,9 @@ static int filter_nopar_gen[] = {
 #endif
     SCMP_SYS(read),
     SCMP_SYS(rt_sigreturn),
+#ifdef __NR_rseq
+    SCMP_SYS(rseq),
+#endif
     SCMP_SYS(sched_getaffinity),
 #ifdef __NR_sched_yield
     SCMP_SYS(sched_yield),