From: Patrick McLean Date: Mon, 27 Apr 2020 18:37:56 +0000 (+0200) Subject: v0.9.5: seccomp - add socket ops X-Git-Tag: 1.0.6~19^2~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3ab8ebbc6e068728c6b4123cea0c6e5316e221ee;p=thirdparty%2Flldpd.git v0.9.5: seccomp - add socket ops Signed-off-by: Lars Wendler --- diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c index 5a6e2ae8..19689fe2 100644 --- a/src/daemon/priv-seccomp.c +++ b/src/daemon/priv-seccomp.c @@ -172,6 +172,7 @@ priv_seccomp_init(int remote, int child) (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvfrom), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(readv), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mprotect), 0)) < 0 || + (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(sendmmsg), 0)) < 0 || /* The following are for resolving addresses */ (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(munmap), 0)) < 0 ||