]> git.ipfire.org Git - thirdparty/openssh-portable.git/commitdiff
Allow writev is seccomp sandbox.
authorDarren Tucker <dtucker@dtucker.net>
Sat, 14 Jan 2023 11:02:44 +0000 (22:02 +1100)
committerDarren Tucker <dtucker@dtucker.net>
Sat, 14 Jan 2023 11:02:44 +0000 (22:02 +1100)
This seems to be used by recent glibcs at least in some configurations.
From bz#3512, ok djm@

sandbox-seccomp-filter.c

index cec43c463eabadc60cefd7e7bac50b0a3a25790c..4ab49eb6e4c33446275083ec9979496f98c8ee4e 100644 (file)
@@ -312,6 +312,9 @@ static const struct sock_filter preauth_insns[] = {
 #ifdef __NR_write
        SC_ALLOW(__NR_write),
 #endif
+#ifdef __NR_writev
+       SC_ALLOW(__NR_writev),
+#endif
 #ifdef __NR_socketcall
        SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN),
        SC_DENY(__NR_socketcall, EACCES),