]> git.ipfire.org Git - thirdparty/lldpd.git/commit
projects / thirdparty / lldpd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1059a20) | patch
lldpd: whitelist sendto, poll, recvmsg and readv in seccomp sandbox 70/head
authorPatrick McLean <chutzpah@gentoo.org>
Tue, 8 Jul 2014 18:40:15 +0000 (11:40 -0700)
committerPatrick McLean <chutzpah@gentoo.org>
Tue, 8 Jul 2014 18:45:02 +0000 (11:45 -0700)
commit285b33afd0dac92e871375a6e00434b78af2053b
tree9aeac448417c6c19af473052128f3d9f60024c91tree
parent1059a20e7e2d138ae7e012baf866af866c3e8a42commit | diff
lldpd: whitelist sendto, poll, recvmsg and readv in seccomp sandbox

With privilege separation and seccomp enabled, the monitor thread was
dying due to seccomp errors, while leaving the child alive. This whitelists
some extra syscalls to allow the monitor process to stay alive.
src/daemon/priv-seccomp.c diff | blob | blame | history
Link Layer Discovery Protocol from http://github.com/vincentbernat/lldpd